{"report_id":"f33eb01a-a626-4a95-9409-11958d8a71d7","version":6,"status":"done","tags":[],"date":"2026-05-01T12:14:30Z","url":{"schema":"http","addr":"binance-usd.com","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"172.67.159.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"title":"BINANCE","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"binance-usd.com","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"172.67.159.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-05T12:14:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.binance-usd.com","ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-21","domain_rank":0,"first_seen":"2026-04-30T14:56:31.060272Z","last_seen":"2026-04-30T14:56:31.060272Z","alert_count":116,"request_count":29,"received_data":1256496,"sent_data":16341,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"binance-usd.com","ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-21","domain_rank":0,"first_seen":"2026-05-01T12:14:36.828362Z","last_seen":"2026-05-01T12:14:36.828362Z","alert_count":248,"request_count":62,"received_data":5620697,"sent_data":30988,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"srz.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":378797,"first_seen":"2024-02-20T03:50:45Z","last_seen":"2026-04-29T20:22:15.904069Z","alert_count":0,"request_count":7,"received_data":4446,"sent_data":4995,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-04-29T18:56:38.20947Z","alert_count":0,"request_count":1,"received_data":116674,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"msg.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":360322,"first_seen":"2022-11-29T17:40:54Z","last_seen":"2026-04-30T14:56:31.786441Z","alert_count":0,"request_count":3,"received_data":1994,"sent_data":2535,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"plugin-code.salesmartly.com","ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":530835,"first_seen":"2024-12-12T08:03:04.74606Z","last_seen":"2026-04-28T02:33:35.419635Z","alert_count":0,"request_count":10,"received_data":958394,"sent_data":4377,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"client.salesmartly.com","ip":{"addr":"13.249.8.42","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":491526,"first_seen":"2024-06-25T09:52:15Z","last_seen":"2026-05-01T01:05:44.810858Z","alert_count":0,"request_count":2,"received_data":84989,"sent_data":935,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"sc-static.net","ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-16","domain_rank":3142,"first_seen":"2017-09-05T18:35:04Z","last_seen":"2026-04-30T01:30:57.81921Z","alert_count":0,"request_count":1,"received_data":59923,"sent_data":416,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":387428,"first_seen":"2022-11-29T17:40:50Z","last_seen":"2026-04-28T09:36:54.583135Z","alert_count":0,"request_count":2,"received_data":6255,"sent_data":1379,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"assets-cdn.salesmartly.com","ip":{"addr":"108.157.214.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":507251,"first_seen":"2024-07-26T10:32:03Z","last_seen":"2026-04-28T09:36:54.466643Z","alert_count":0,"request_count":3,"received_data":155415,"sent_data":1765,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"284628d6a77f7e6db805989bbdfb32c4","sha1":"0326ea23c1154dc2122017302a64c61db1bbed87","sha256":"468853dd84c223fbc18146e0c8afdeb79ebfa8068aa511ecc13c07c28ceed255","sha512":"04c5e74f95462728a8fbfedd715008069f8f23b9102ef3e75a8fe49f4558d5706a6e01b500ba67e855ac477520014a608a63a1718e8115f524829a48a8b840f5","ssdeep":"","tlshash":"69c08cc5b0c73d502a02661614bf25e49034402a708c1b029d98e88a3e320b08233fec","size":151,"data":"","first_seen":"2025-10-10T20:21:17.507788Z","last_seen":"2026-05-01T13:58:35.337423Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/route-block-83d24a4e.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","size":27,"data":"","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-05-01T13:58:35.287024Z","times_seen":646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/autoplay-01e26a3a.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"25fe6bc9b92d38094fc299a7858cf09c","sha1":"6e6737941e6629350f0c48ef858f913e152b7e80","sha256":"c0e2ec1f211c32008e93e39a3192426801aea5853fa75d66fd64dc4c8a8377e5","sha512":"42d33fc17872316218d26e2b8724e58c048999a5881b42c6cfa5eff9abc1fa423a001496f806369055b9ac446251c1277a7689692fc89763052f1ff0c3cd54d8","ssdeep":"1536:WfA+DqolxUdfGB+TLsUimRCsdRPQhj9rjzVPeXV/wTmBrvl9V:+x8RPQhjPIp1","tlshash":"45831a89b224b17706f75a8b82b5c21172b44948f805d4e4b1fd5dbb486e98813feff8","size":83129,"data":"","first_seen":"2026-04-28T02:33:41.882806Z","last_seen":"2026-05-01T13:58:35.319086Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10568b780a0d314b06f4ae6be4a339f7","sha1":"2c0ba855511dbe4d8ce3bf061282976a34fd375f","sha256":"97611d5571f8e91da4b84e7fed039c19126ed0d05a358286b229ee99b23e61d4","sha512":"f1d5ba897fc7e7481668825a9b1fc036114a015a88759f3df8a3f52521648c16dcf66dd17116a513a7ccbc3f4d62eff48fde1b11b4905917762aec42d1009705","ssdeep":"96:nfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHs:nfkdoq1aBIBksXZhu8M0k9X+T60YDs","tlshash":"beb1991b69e56468a703b0ba8c3fa406b521042f099cbd407e0cd7769f8953daab4edd","size":5554,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-05-01T13:58:35.33355Z","times_seen":421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useArticle-5f65cd74.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bcb7f626fba16f4603d111c62b7d5ff6","sha1":"cb21b3cd026a4f356d449c5f63cfb162018927e0","sha256":"e34f0abad83baa33ea3cdabc39013b3c69a5ce419825c6d8948ce62083dfc61f","sha512":"a729e5b4b18bade9bc1a322a450d47db29f1d4e68b37b4784ed7209e37b615ef1bd258517105d2ff280e730145dd6eaea18e181339eb52b33f27d7d4d647eb03","ssdeep":"","tlshash":"5bf00274705c97b892767cb08879204c02712b00f90250c0270e9f5c19b66569271f4c","size":616,"data":"","first_seen":"2026-04-28T02:33:41.662276Z","last_seen":"2026-05-01T13:58:35.300514Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"36f26a090abdcc337bfc430f7eba2abf","sha1":"bde4b3d8e5ebea671a9a85174cfb4058a4bf0adb","sha256":"217e71e9b0dbcd6bf49e06ed0c8570fc448a800192167db81cba4cbaefddce78","sha512":"a191f331612f086b236bcab8dc8340639cec8859afceb86edcaa7913e42165ff3d184a5a5f4bac7ea93f59aeea3c76e505c456f9f5da206347076658fc271a87","ssdeep":"","tlshash":"12c08cc8a0c72e101a12655015bf24e4a024402a70489b038c94d8482e230b09233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-05-01T13:58:35.341341Z","times_seen":1476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-05-01T13:58:35.342372Z","times_seen":5029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/plugin-install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"98772ac8f48c99c5993ecca25715f9aa","sha1":"941de7b3af4dd94c3b73e3baee851f1afe8dc292","sha256":"e0f936380b80a3f0f27afe4274efbcb4dbc7fe67ed3e0325f399721abd41bf9d","sha512":"9e94c55015d02953ad49bc72b40bb19274af84e122f68dbccc3e58ea7c05b6d94991d0db3aa497178a3647dee6d5c32d3c62e8b37b9ffbcdd46359e063663b1b","ssdeep":"384:2Pyg/NXbASoSALbGf4NwNiB0W9jyyxRyL1hKGadeBTKSwQU:myg/ia4NQiGWwnLadeBTGl","tlshash":"ed921a4874297c7842af5a3325fea214207f1b852931d4a0f26cdb786b78d875177ebc","size":20819,"data":"","first_seen":"2026-04-28T13:21:41.182751Z","last_seen":"2026-05-01T13:58:35.298643Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"13.249.8.42","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","size":36489,"data":"","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-05-01T13:58:35.317297Z","times_seen":1966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7d4fbff71549398ceffe8189db57c5b","sha1":"9ddc56ef19489e0d21f74eebc29c92b469ae6fd4","sha256":"ca663f53ed1b54e1f40c4b17ba2257f76179690249527bf88d268d9d178995a3","sha512":"bb5e60f5eec27743c6cfb79705632ad071bd6cdfffb44d8f0ce4e2c884c1bb531e06e6aa80bee647986c34bb4bad620495cd48c61e8d30441914687444b03b1b","ssdeep":"","tlshash":"e3f09e1b1886b07e53d760b6593bad5b322a11472c5119077d4c80242fe083d7ef5fde","size":623,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-05-01T13:58:35.334025Z","times_seen":421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f6487b2abdd19da7d2000e6948f4f1c","sha1":"b979b115c298e978f27467edb31ab1b318aed3a5","sha256":"23564c65f40d1f2ab2dcd8eda148222b38bc88958330ed728181f713a56a3ff2","sha512":"6c2d9837a4fc8300b16bebcba72c85ce0d21b7c1724ba5d87d809a1c463594354421f5fb935823c209e177d449741ac9cff38f1c271aa9375a42326356df115c","ssdeep":"1536:kb3gziinUta4oiLsXb2U/LuG0ch4Hl/HDTkzNZkVXK9:o3l9P+Lj4TY","tlshash":"6543d58cf7d9b02103973472487f541be33bba646c4bc650c526e5887dbc59aa237eac","size":59263,"data":"","first_seen":"2026-04-23T18:32:43.944826Z","last_seen":"2026-05-01T15:42:22.340634Z","times_seen":1049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/TaskList.vue_vue_type_script_setup_true_lang-d7bf96dd.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c25c28b0af75c92de44136f52b589bb3","sha1":"d2bbb08634f736e7a5dd609196be2fdbe1f5094e","sha256":"676cf90f44081da854b2d63f50f6108f987b425af8aa4bea38588868eca396c3","sha512":"d48d014e4a2261f09af16f68cde038c8e5030211df075873b7ba2cf5cae31a5a048e0a2d023bd876dbe203bb1c4c2e75cba4cb9c207e78edffb675e3b6128189","ssdeep":"","tlshash":"b4f0c08e7d0d56b383598db4b37a446260940357632c91d4f84e0877d3114a4a87fedb","size":546,"data":"","first_seen":"2026-04-28T02:33:41.84013Z","last_seen":"2026-05-01T13:58:35.304464Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useNews-8a42c888.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0cb7b213b7bca441989d3a3863ce8b79","sha1":"c145217e9c6f7add9019c9ca10424dcdcbaa2478","sha256":"a7d1a73a1c22ba6bb0933d372965a847f0f23515e3ca0f393d60ce5608b18d95","sha512":"9501e9276d622186e62f3ac0c6ef0c0f773bd3149e1e846492f69b8db3d785096e41f1f1d89a78c9c97c74fcff66bad78d05ad10f200d244c20234bad5d44750","ssdeep":"","tlshash":"9311404db066d3f861bf1c0c24520018216b5b847931e8c0a3be09931a62cf0e53ba3c","size":916,"data":"","first_seen":"2026-04-28T02:33:41.846494Z","last_seen":"2026-05-01T13:58:35.291276Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7144169280a69b1c180a70c7fb7c5047","sha1":"286b077ac1ddc843cb5a34c0310fec82d7628167","sha256":"0860f78a352e55f64ab8fa11ce266c6b60f40f4ee95040204fc70884babac6e9","sha512":"2cca64caa2a5ff4fdc390e7127fd89645a0e80135214f066e068f14d9726fdc0965fa5a9e79d7222283d8e0e12c90fd504367f81ae5fb580e3c1bc4c84a12f68","ssdeep":"","tlshash":"edc02bc5b0c33d101602641010bf38e490344027704c1b43ccd4dc583e230f08233edc","size":135,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-05-01T13:58:35.335841Z","times_seen":412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/plugin.cbd06084.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c45924d4c6296c493327e16b61eda974","sha1":"3ef2ffba88dadb6b3c5cfdc92eda4aa571d405e0","sha256":"ecc27b45842422f12dcfcf2d605b5d62ef20982f6b12261b2e51b3c7fa9b4d1c","sha512":"78b5173d501b71b6f8c8cc99a2b2906e332e7e499d7df68b10d3e2f6d67dad500f418fd4817cc87903b41c096a35cc8a95a4f0323da7e1655350ecd592303396","ssdeep":"6144:G0bg30bPKQQDLVQbOMZzhDetWx9a+gcmLTDrqGKAbCPfvaHcqiQUd+wa8Ar4gWDE:5bPKQQDLVQbRZzhDbMDrqGKAbCPaHcqn","tlshash":"2f843a49f5c9f86b07b361b1602f6009b3ba1b48e409d8e0fe75d6e91ab4d496323f1d","size":380050,"data":"","first_seen":"2026-04-28T13:21:41.188714Z","last_seen":"2026-05-01T13:58:35.290707Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-vendors.6ef765fa.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e788461ba915adcbfcfa9b10c35f265","sha1":"bc3841eff0c3841cfdef9a2f1e1b5f1d0dd6c26e","sha256":"69ced1151fb1b32d26c8b70739681828a1d99333c4a08114c98cd8af90b3f2ca","sha512":"b20ea5f22352ee329e6982d0fbd14fa2f4607a186b2d2973a99e43975164b2c6142b8ce87f7d5f54f47cb41bd6a33329ec3d09fafcb971de6e316ce5c0c8cfe0","ssdeep":"3072:gZcGj+j4Cm4m5BJ1IWqq/1cuC+4DdC58+skrMJz+8:gG27J1Wycu+4ikrMB","tlshash":"1424f7cdbb92f06843a335a4806f150bf17b6a18f40e81d4e6a6d5d1ac78a8e5137f3d","size":214670,"data":"","first_seen":"2025-12-10T08:58:23.267899Z","last_seen":"2026-05-01T13:58:35.331763Z","times_seen":847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/vendor1_b8775aab.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4dd10bf9e3a55d04fb02d076f8d888fd","sha1":"73fe2ade639561e0fbee753a10ab3a8f64457ba6","sha256":"9b5cc937de300ae7ed821b3c25405086cd9fc0c25be5f6afc2213b06d1981408","sha512":"768877b7f6860408251dfc60ac57ed4499ac9ff259f506f98020a848b1f8dd67378758074406603c95d98bfa621d4d451d9a941f9932c2bc9ecfe1eb9e69f9ba","ssdeep":"3072:hUj1XOH0ipFe9OY0ceCK7KtWO77yzk83UzlgE6CjnWO:2kHbDCK7gf7n85NO","tlshash":"b22408c8b295b06143a770b4407f550bf13ab915680ec5a4f226e8da7cbc98e907bf7d","size":225000,"data":"","first_seen":"2025-05-10T22:57:10.916725Z","last_seen":"2026-05-01T13:58:35.320861Z","times_seen":2062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-a148c833.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4f2f5af9f445cbb2b3625edede115a8e","sha1":"e0beb65b419b888fa1ee4956b2837b8aa426c408","sha256":"35d0f9305a050a0f739a0f3684a883702fb5b621a83a0161a676cca223092a40","sha512":"a7d598640e1786258e4d1b948e40dc558580c358eca7de068ad7383969483d81f3fbedac5c16d53479a028ba3fa4fe27d47fdd93461091cba01fe44c96c2f883","ssdeep":"","tlshash":"f9f075096c06c5bc2c82050d2a8520109104377fe32464fca6df213ca79f4f9783932c","size":556,"data":"","first_seen":"2026-04-21T13:48:47.860855Z","last_seen":"2026-05-01T13:58:35.294277Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"557205712a9f8fd02ee4c5dcea101d1a","sha1":"1f16171ad2baccbc7dcfefaa4883fba4e07e4187","sha256":"34179934587583cf7a7fda76ceff2bfbe357be3247ecc7bcd0c014bae964a6c2","sha512":"dac3505582dc33c0e6ba1a080e0b5cca5499c9a8ac2f99042f6b27dc72cc484dbc49336927507e7378790b9049065f2b8cbdf373ec4d27be78d894acb627ca62","ssdeep":"","tlshash":"f2c08cc8a0e66d102622765552ef25e49024442a70486b16ecd4e8883e330b08333eac","size":153,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-05-01T13:58:35.339382Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/index-795bbaea.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1edaad8b590008322e17b45548ff4fe","sha1":"5c0e07c90b9ba7e5bd9df4524b40daf6805dcf2e","sha256":"f1e230613a01ec4725d5c8782fff0ccbabaea91f7fa045fcffc6078c79912b50","sha512":"45586c4064b3fb97e70a18a8c19cc93279167403c7de2a05ad3eb577f374511bb764d6236650ba0c274e0079ec57be3b4d7046b9f4343b53b6ca677e8bd083db","ssdeep":"12288:pV12Q8pRIKTgdULpzxS0BEkCe6apVo2bbxWJRoFlT:p8Ii/LPS1w6AbtT","tlshash":"f665d1286a2bf354e518c0d7fa3b3c84c59de58aa00764d14f754bb31ba1792ebacd13","size":1419501,"data":"","first_seen":"2026-04-21T13:48:47.912852Z","last_seen":"2026-05-01T13:58:35.333028Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/tabbar-5-1-88ebdc42.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6f426d1d419eb7c29b054c7ba217aaa8","sha1":"88a040864ff5fcc97b874157809a9d1a5ccb4da3","sha256":"12f422d1f0ff02d2dcd3de682631b23ec56050ff895881306df19ae0003b21cb","sha512":"02407a19a3d1082c613e585050beab002f06f4e6b0bdf47e8b1c2aa45780b00974731190a801308f803a1ea9866d06447fcd72dba7048b9bcef755a1fa1b2959","ssdeep":"768:uVxpvoZ8USsO3E2443m5upG1CrMG/O3LYNTw9Hn9LxpvoZ2UssOWE2143m5upGKz:usO3E29Aj1hOT4n1sOWE24AjK5DT4n3S","tlshash":"6663e07631195ebfaee18862f20a0205cdb1169b530ef299cb94b2b754dd721ec1bcf4","size":68031,"data":"","first_seen":"2025-07-12T13:57:48.771979Z","last_seen":"2026-05-01T13:58:35.289278Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/tabbar-4ecd2a86.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d55d0506b6d45dfd62243a484df60f8","sha1":"8a25b8641518b0b1a11281f1970edd87f5f20c4c","sha256":"80fc8f31743fde0428f544a308dc8e88c598921d4554dbf73ed1ec77c1e5438e","sha512":"f8d2ced8bfc739ef423631bd5e52a155444e2c3d64f3d6752d7ef72c4c393ff7ab7d07ca40a23f7ecc427696df82dca7eabaa798d139b064d28e02a5afe0509f","ssdeep":"1536:L97rv7AmRmcqR19z3FEjoFc+8osT0vl6hkE4lf0qArT0EJTRsEpmKf/gUOsE7TR4:hQnze298Ngyr","tlshash":"3bc3d8848a05d57ef13264425c5c0c42714dbfe3e8199ab6f2f8af5927d1bb8632e327","size":122449,"data":"","first_seen":"2026-04-28T02:33:41.721464Z","last_seen":"2026-05-01T13:58:35.292576Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a73c5cae5d436d920f302d21df9b9a3e","sha1":"01939d397680dfaeba4cbd149365b394fbfbed8e","sha256":"f3806633a8d5eee9cd085ac152f7e71f93620317ef183cddeaf47bc93aac6c5e","sha512":"8a16c190a1a2fadefa0a218fda86960e288abf4e7d2c391fabb795b3aa9793c7f445ac6557563e9ceba3d76de0cdf15751964381ec0977cfd2b8b0df1e3d4427","ssdeep":"","tlshash":"0fc08cc5a0c26d002602651410bf25e49034442670481b03cd94e8892e220b08237f98","size":142,"data":"","first_seen":"2023-11-27T00:22:22Z","last_seen":"2026-05-01T13:58:35.343877Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"02408d922d2e1998a79d8d6f850a8fa5","sha1":"05881ad7e2edf93b804c00b4998f794b9be830e2","sha256":"2864865ce925856a2bf5886ef5970aa3f3c2c592f2f6963f42fc77308efe5b95","sha512":"d79c14118cc3f703cf56276c6432e4c886ed04c65964fa528d842d1f2efb256ea5cb7f313b5dcf870032fddad8b695ac049c3d0de86f8ceeb0a5932b7586cc2a","ssdeep":"","tlshash":"c9c08cc4a0c26d105602645010af24e490244027b0481b028cd4d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-05-01T13:58:35.336396Z","times_seen":920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"389d76f777c20a4c4e804b15bd550e9d","sha1":"4ba553f5d41d1562096c002a8f60dadd81f2de0a","sha256":"a82568b572a52dd3a859fcb35af1737ee747085a05b6db4cfa7ecf72b14e07aa","sha512":"3427ef42985a72a5de2e8857b0d35f267aaa29201c3a3f98dfb50b8c8542f4d9dd271f32a3b1fcb82fe10c257d3ea5b8909fbd74af4da1085a85f19c61e428bc","ssdeep":"","tlshash":"ce31449436e5f8a153d76568013f8049f3aa0865187df4e0d3a9cdb97d38c8d40a3f5a","size":1589,"data":"","first_seen":"2026-04-28T13:21:41.181728Z","last_seen":"2026-05-01T13:58:35.285963Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useActivity-0c97d58c.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a5d1ad961a3ad282960d430c98ce7019","sha1":"d9aae00363f37adeb372dba998db069b1ba678a3","sha256":"accde18ea64d70c568a9be92216cf6aac3a9ca122d6ec4afb3d07f5d6c3a1afe","sha512":"cd3bbeb01377d87785c11637aa4f4b36d5d77172cde7754cef7e7b2003f832e38a3791082dd1c90a0e9cb0e80c5f36ca033c703181cb5b1e8ccfdd551558e490","ssdeep":"","tlshash":"1a21339ab01df37950ef089a1825540311492bd4a325c4a8b7a50c4e13d7af9c67664f","size":1152,"data":"","first_seen":"2026-04-28T02:33:41.682599Z","last_seen":"2026-05-01T13:58:35.315911Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useFriendsCircle-c0118cfa.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4e48229fe68a6127e23d0ba0342d8fd1","sha1":"cf235710c7e6a1320a45fe883216fa274ee6010d","sha256":"9a2aefd0706fd66954ca944b49bb2cdd5ca6f45fd6d3fdf55a04a819055a3a66","sha512":"e888ef446ab622f011333eb14c0a3a70cec6913d92450bb63ce6d3e16d78fe6a2465b1aa2b6a4c148d7a66ae4fe38bdb912cbb79ebf741d7c1f6c05fe7afa5ee","ssdeep":"","tlshash":"4351b67236b226ead3b330b9e13650159aa92f943d16d1d1b11d0f058a7cc12d9bff28","size":2736,"data":"","first_seen":"2026-04-28T02:33:41.665972Z","last_seen":"2026-05-01T13:58:35.315324Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"65c1f755cd8887bd9adfa92c412f76e6","sha1":"b6b46d53bb3ac68de8bce2a0a1671d56efa6ce8f","sha256":"b88a7374697019ec5206e0a9c40d58a1cd9901bd0e9cec76170a9c153262787f","sha512":"a8f05658606458fc09b133c6438eb1b8de37222fe159e96ff40af7f6e8bf42b9baa9ec22e519b56f8aa6ad8f7b49d316e20ed8bab2ac5b659d2315cd5864106b","ssdeep":"","tlshash":"85c08cc4b0d22d002612681168af34e59028802a75881b528cd6e8592e270b4c233edc","size":147,"data":"","first_seen":"2023-12-06T04:41:19Z","last_seen":"2026-05-01T13:58:35.346707Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"caad72fe48a09f8a060e5dd1477935fa","sha1":"f2b5ddb3021c1d3b5df6a518c7b555a7ffaeba39","sha256":"3097fffe06a687f15fda650f93d6f5303679a4fc78db9645da44a7aa4fa902fb","sha512":"1ad398a20e4693fe3fcd02aa2ffd3fa8f2c7bc1cafdc3778ed28300852491cc74174c17f930f387a3d75c02a35aa21100f56df21ee41f5222850cea0d1edee06","ssdeep":"","tlshash":"b731682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1591,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-05-01T13:58:35.338397Z","times_seen":421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a28e056a6989b49de8bf0c6fe7a9078e","sha1":"166889dc07218cf99767d4179177e393a87c50b5","sha256":"5adba9de6f8cd98bd9f208363a88990f71f45bc7eaa3b277fa7fc86d54f0ecbb","sha512":"5fca1b898fe0243788c1e8403086ea2b8f6374b3575b8c71ff971b969f1e1325eb301221aad3fa4f9447bb8df6c43021297674123c156e4fd1a322d5cd3cdcc9","ssdeep":"","tlshash":"acf0ab0b199008319707b17a2a7fec0a1e42201f29646671be0c95109fce97e4664d5c","size":506,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-05-01T13:58:35.340958Z","times_seen":526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-common.d732e404.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"70361bdc89b849c1f27d3445a07ce136","sha1":"ea798c80612b487c619dd887adc3f7fe53f1fc4c","sha256":"77e605ab99763ca16e73b4d29e49a0d7350a2c43d7c64305615a7c8cc1aa2fe5","sha512":"46a8c496a333ffc5f8f1d30c8153c08fd189efa6962a762ec03e7dc92e8691127f2c76f3ba361fba7446add85f91d36701396a0a3713f5db60b4c6a5418ae1f7","ssdeep":"384:kF9kWEuK2U72UecAvTbDPnPuTc2YejErqSqcDRVE1wDTaR5HJrCiKMcJHI7jW:q9mZ72UecAvrPuSqSpE1IMoyW","tlshash":"a6c222ccf2d7f0650b9a38a481bf110ae23e7d99b44e9196d261e0c17c3454da273f9b","size":27007,"data":"","first_seen":"2026-04-28T13:21:41.18375Z","last_seen":"2026-05-01T13:58:35.317886Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/BaseLogo.vue_vue_type_script_setup_true_lang-07f76166.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e82062f1a921352aef9fef6dce1b7208","sha1":"8dec9bae4ce5cf3ea9d117127bac8adc1a771889","sha256":"446cd1f6dec844102e2a5f329331230f622aa4d199b50778c9932e3b16a92c8c","sha512":"a6e50efe75c3345bfff4cbf85aebc5b6c03e8f155b4a34523610c1ec6269885cc714d47fe631b821b25d9ed8808a40076f3206a574da49edb80a5dfe18f53593","ssdeep":"","tlshash":"9ff0c00f5c2a91ff40a658982b47604111095fbdc6209dd4f3e52274624186a701d668","size":522,"data":"","first_seen":"2026-04-21T13:48:47.863202Z","last_seen":"2026-05-01T13:58:35.295366Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0a135a3820c44612d285347e945db1a0","sha1":"c751ab64ae029f5969e555a5dbec7dc15eb8f339","sha256":"6a02a962e9797eb8838be4ec5b3dbd47c5c6ced0fdee45ff8b242e92130a9d61","sha512":"92028e04908a6c3cdf03c75cf98c4678eb7bfbbdd11939716bad337599380d34293b296b7a059358cbdd3632a32b9f6b64f6768256fd20aa2efb83ff15d3a65f","ssdeep":"","tlshash":"6ec08cc4a0c23d001a22641068af34f4a034406ab14c1b528e94d8583e230f09233f98","size":147,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-05-01T13:58:35.337933Z","times_seen":926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/index-c6f4ea70.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7150983d5d85e447e3096f683c2d6db","sha1":"ebf2db10ddeed80e27cc0447f9707b953c3ca4fb","sha256":"388d5bbcc40e403eee741b355d3c737f9349d859319169080abdfa4725d36d80","sha512":"d8045b0388f0e2750be845e00c7f9d1224f35efd0d88ad28a8df7e7a08eafe36cdca0d17cdb4556b6a590246972f690b7972ebce792cf4452b2baa46c24cf252","ssdeep":"6144:DG6T9i1XYK2MbqEVdnw76I0BerpqgVAeSpV9fNcX/ZT+esEJuXG79SY0nbWozYx8:y642MbqEVdcUp/Ear7","tlshash":"3ce4f656e216eb3cf9bb92a4d199185072992febc0508165f1fc0d674be2cbc2b0c779","size":686906,"data":"","first_seen":"2026-04-28T02:33:41.704707Z","last_seen":"2026-05-01T13:58:35.292123Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c771a56c31bff8ba6299f63241568899","sha1":"3d6509d1f412e744a937e891546180b1093f7ccd","sha256":"c0b3a74335ec3f96e25be399971bafea9e3513f821dd3b4009608de199fd4f2a","sha512":"f859c02090a494b60671d2dea13324fc38d926b315de977edb5889e587917facd9d2e4c1e73e0edb3f0112b5af30b8d05d33a173612c81f4cdbcab5bcf47a03c","ssdeep":"","tlshash":"7b0128e59986483146db31fa2a9e301070318003b908beb0386f15446fdd33ed3f6bd8","size":689,"data":"","first_seen":"2024-11-20T07:54:53.452195Z","last_seen":"2026-05-01T13:58:35.341842Z","times_seen":416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useHome-e6e4444c.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f960a8785dc5ef3e261d9f0b128ea265","sha1":"6da2c63323e444389083cfaefc248d60a69ae9ef","sha256":"1b48ec90c657395e0921bb86a855ea70a079127f9238d2e17388a66d8af85f8f","sha512":"0eaf2b11554a32b2f25fdff3a2970337bc329d20dff8c5be7409f2cb96265a7b319de408bec6cb8e5767a345fcbc7ef145b39c4d0adc8b439ec626d018c48ecf","ssdeep":"","tlshash":"a6618348b3b38078c7b919b016e90a01603eeb19dc57e0cdb1a30555577bfe6b8dcea9","size":3461,"data":"","first_seen":"2026-04-21T13:48:47.852231Z","last_seen":"2026-05-01T13:58:35.302722Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/product-e391d1b8.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ec6ed510d9ea2dd4b8b4d136342c28d5","sha1":"ba36ae6418478311ef7e6b65ee59016b7a9e31b0","sha256":"95829cab8b253dca9a69c5a86c886b7de891418cb27beee6bd91d57a6f163946","sha512":"c162b5ec9821e5820489177cd4b0aa90275508da66f4f146e0ddaba1ef8fc28c4e2b737ea8c3eb3a36ed0a70b8a8b70237028f8ad840217ed1ac4c7f091d3465","ssdeep":"","tlshash":"9c012b4e6c6ff3c94557e8b0a120ce058e19a960fa4d47f87f547b1176c218a6199b34","size":685,"data":"","first_seen":"2026-04-28T02:33:41.696831Z","last_seen":"2026-05-01T13:58:35.287534Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useCompany-d95bed5f.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dfe9033e730d9f42f20187c47e5907d2","sha1":"d30bd194a5670d525289ab008fef0f54f19faad0","sha256":"07ad49594dbe1f8ed045b89457befeb5841c7c2840f5c50e9016835d053b0061","sha512":"e63d1d39cfb26234f4d7d9594eada724f3302b83ba95debc627d0a9588f986b82a4a4a3b0e1582213437ea533da933b27dc09e41be49b6b06c78b0b6e889a59c","ssdeep":"","tlshash":"fbd09728a00413f912b7389c5338b82800a2a170330a86c0891a0e050be6ae25167e0c","size":227,"data":"","first_seen":"2026-04-28T02:33:41.796208Z","last_seen":"2026-05-01T13:58:35.294781Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/index-89c6254f.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9da16dbf24c463162ba5c57752cc748c","sha1":"dd378aa977ec0c40a73739059e527d61bd0f769b","sha256":"77fa1e99de5e1610b5f29f4f6656951dd605c6decdf8f3142498a156a52e814d","sha512":"1d29cb3517d8e0b6788c8bd63ef86fe4c4d374a5435c3a02fb7892a438c1eef22c7c52978bdd00a0886d4891cb9b6294d05ecd7be0cc855e12c4353eb003b365","ssdeep":"","tlshash":"6311232bec95f1704153989ca6680ba3a3cd7ed8213093d4b65e8d7807641ec703a60a","size":901,"data":"","first_seen":"2026-04-28T02:33:41.823137Z","last_seen":"2026-05-01T13:58:35.30482Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/BaseUserTab.vue_vue_type_style_index_0_lang-8bc70cd2.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d6eb86ad0c578162c281f0a08991ee21","sha1":"1440b85b4a96b9ee3c4bd9863d6cc7e65c2ba632","sha256":"3ae188eeb355b75490634ccbd859afd086de44689f2e37bc718f57334e285053","sha512":"39f18ee43b8df8453791d8f56cd710e28d65c5700a341a9722c5ead15b63f07a0098a6c8213451d6e1954ff622c0f08fa33d2f2bb86caf841acfd71e07ed5351","ssdeep":"","tlshash":"510149dc58f9cbf9849306543e2a5050d0958f94db39cd4570ec1a32274b8b1b6ee37c","size":724,"data":"","first_seen":"2026-04-21T13:48:47.880093Z","last_seen":"2026-05-01T13:58:35.32577Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4180b388c712915aa8bc3ddc204a3fb5","sha1":"3372b6f6a2cd3838500dcb9295e259c5ab31e4f9","sha256":"811afefdadd52874d34574e5b9bb4ed450eac93f4a0b0b186f8ce43b02acfefa","sha512":"9958d8601831db75c6b0225d52c39edc068c0b6e350da06c835acb307ca21fdd7c39bf80d6f1d1fc27da48a52a2431f0ecacde1e4e97992405d692f4905d9f91","ssdeep":"","tlshash":"66c08cc4a0c22d402606651010af24e49034802678481b029c94dc482e220b08237e98","size":136,"data":"","first_seen":"2023-12-06T04:41:19Z","last_seen":"2026-05-01T13:58:35.340195Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f4465b64446aa0a44abade4070c5e547","sha1":"5b3bcf7037439bfd3bb31a961ad435b78e636094","sha256":"959967dc8a880ff6bfcedd62cc696461a8e1ade9d0027177110465035792c056","sha512":"aaa934f931ab8695a7f6abc349580f95f6302464c3bc931912c379ce20b79df3e5de3e834aa48d11e98cac8ced16680a9005683d304b4bd65bc03a836d408e28","ssdeep":"","tlshash":"b3c08cc4a0c62d001612641010bf24e490248026b0481b02cd94d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-30T07:46:29Z","last_seen":"2026-05-01T13:58:35.342873Z","times_seen":2013,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e78c1f258f3b0ae5996bb4f66121b1a","sha1":"e98d398efad79e8b5baceb5a86c508fc23ff8df5","sha256":"6334dfdc681a227a28ff9ca0d4966d3e974157148466c09b0ba9e01feb52a028","sha512":"2effaa7621f4047ae94082e1fadf7b4c8c8d43fa4088bccb17769a224011958715b6cac0e042b4004490f983c229b8c5d2fb24dc5de62c1e7ff70c8b11c8b180","ssdeep":"","tlshash":"3cc08cc5a1c62d122a12641116af39e4a024802670881b468c98d8592e230b0923be98","size":144,"data":"","first_seen":"2023-11-27T00:22:22Z","last_seen":"2026-05-01T13:58:35.345711Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/Rank.vue_vue_type_script_setup_true_lang-7bfe15c6.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d0d533474972d66ec7bd908046c84bb2","sha1":"e3b86cb5221c82b6465cb8fd90557634db03e147","sha256":"c97643f6277c1f377d72fdaebb1b525fadfb757ce9b37e597c8cb5778f53a8f5","sha512":"083f500042d5b275db9253481740d192f5f868d1ee5d992a95002388e12c224cd16604f3cc65e577067eae6d28f22ef7586fb69f394adfe1dbe1d7cfa6c25e08","ssdeep":"192:ISXddUAIpf/n47rsTBuXb76sVLQYe/mwCZmKDkk/3Ic:IS+6eCZiOF","tlshash":"60d1ff516025cabce4f36165b58a9921b184ffc7c167c406f1fd28032beac75979cbac","size":6716,"data":"","first_seen":"2026-04-28T02:33:41.807718Z","last_seen":"2026-05-01T13:58:35.327528Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/InvestMoneyCard-04ef78a5.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ba0230a1fc9f5eb721f37d7a837ae383","sha1":"d52a80d1beccb08ab79cf32c16fc2ae0f886aa47","sha256":"703a3eb658a3e5fd36fd29ed8fe326bffe796bc426904c19b3466ed7b1030c14","sha512":"ec90b503358763f376f1b77c6cea3b978e9d38ee3aa9fee656030cdd66af14095cef4d6cef8193ea9e245abb3ee55d07c5e5266acb0b4f1e0824c5273dc341f3","ssdeep":"192:boT+z7/ogqnIkBkDhf123wuCAaMoaGjgg7:bo8SZsf1BuCAaMoatq","tlshash":"d922db4076274f38eab32825b4ed5001b31c2fc6c482a552a0fd67825fcbd76aa9d76c","size":10681,"data":"","first_seen":"2026-04-28T02:33:41.678664Z","last_seen":"2026-05-01T13:58:35.288037Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-05-01T16:10:13.781337Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/danche-5acd014e.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e76485cf82c36e5eda8afffd1433cd4c","sha1":"6429e127f292e66ff78079815eb972fb7a8ddbcd","sha256":"dcf650a5c619bd8786e7f50f6f7a7b003b549e25e97dccde0da212d4d1894498","sha512":"2ebbf8a67261fa5e74b8ee38b3bda3a1a02be115e17cbd7364fd6b5049027ce334c4388214e67b46423e74b212ccddbcfc63dceca1f117dc9a1acae9092a207d","ssdeep":"","tlshash":"7311106f780376f0fab01c602a66805322144b8bcb2fe2c5b2bd0e41a796d307b25635","size":980,"data":"","first_seen":"2026-04-28T02:33:41.736306Z","last_seen":"2026-05-01T13:58:35.298112Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"421efed211514571d72a14276edfde2d","sha1":"97a8c92c153465f97249bc9a1454856cd59fae04","sha256":"0eaded59f36462b5d3498a1ff3db4c8f5ea81650fb451241ab9313502be0fa60","sha512":"10085b2bdbdbd08ddd53111b0aae17483f9980cf5a5488b4d2e1a79b67d8228cf5ee249e5a3cbf44ffd2fc969b1eda57a0ae35c678e61ca845e1d854d0ec3c45","ssdeep":"","tlshash":"e8c08cc4a0c63d002602651114af64e4a0244026704c2b62ad94d8482e234b08233e9c","size":142,"data":"","first_seen":"2024-04-30T04:58:08Z","last_seen":"2026-05-01T13:58:35.335207Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a28e056a6989b49de8bf0c6fe7a9078e","sha1":"166889dc07218cf99767d4179177e393a87c50b5","sha256":"5adba9de6f8cd98bd9f208363a88990f71f45bc7eaa3b277fa7fc86d54f0ecbb","sha512":"5fca1b898fe0243788c1e8403086ea2b8f6374b3575b8c71ff971b969f1e1325eb301221aad3fa4f9447bb8df6c43021297674123c156e4fd1a322d5cd3cdcc9","ssdeep":"","tlshash":"acf0ab0b199008319707b17a2a7fec0a1e42201f29646671be0c95109fce97e4664d5c","size":506,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-05-01T13:58:35.340958Z","times_seen":526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/Task-635f1657.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8e3ef7234d5071e2259af49bf608da2b","sha1":"8a81f409dea65bbe8ff7fe89bfbe3d7ca24d8e33","sha256":"e952751d027d1a734a75df5b2bd4077383faa158064f7c11c91cb7b8f596c5d4","sha512":"242de3c701ea060ef33b637f7777cb173e2f6a0dfcaf2376a93381725917ac115bff28b21af5f2245ea03b4fb7afa3801d7847c85839e9239fb719f93995f793","ssdeep":"384:OUJN/R4/oGo+We+UVJa5+Uptl0Y+UK1jN+U7hL++Uz:OMN2oGo+We+UVJa5+Uptl0Y+UK1jN+Us","tlshash":"9672ed06e807e2acf1f6b48465dc581462f42edbd228c407b5f8653623c69f0a79ef79","size":16443,"data":"","first_seen":"2026-04-28T02:33:41.889281Z","last_seen":"2026-05-01T13:58:35.296168Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useVip-07a76e90.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"69c7d9822776b18d5dedf5d97de57b3e","sha1":"ac57d50ffa791583f71790eb94c3fcd256f604b2","sha256":"9a5404968501785f6cd7fd3d49ebef1d589544ba83176cf073b191d846642c12","sha512":"6fa2718d899265d3a7e6fe65d0401fb95c8fa65ebe0c98a32cba3d85b3943522eafe096f483f92d30aff1fd6c4abf566acecd4e07f968a4cb8ecca720275c13e","ssdeep":"","tlshash":"6e5152abf178097a0bf50878a8f9138711341304f851a5ea52971e419f6bd118ffaf0a","size":2986,"data":"","first_seen":"2026-04-28T02:33:41.765708Z","last_seen":"2026-05-01T13:58:35.311814Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1d4700e7818854aec11dc4d0591f9626","sha1":"33b2ac2baa38752d6f1edf04c37521182691204a","sha256":"1d5965d8f785900972e887d8981bd26afd51aab614536dce2510a27167b51ff0","sha512":"dfb9f4efd73dc16da30a73a6b0e794e4eb49d92babe6f730363281d2c54dff1e8efb16873a9c361b8531368e7efc4cf6eba61d56628671e7a996ed795a17eebb","ssdeep":"","tlshash":"89c08cc4a0c22e005606641011af24e49028402670481b028ca9d8582e220b08233e98","size":136,"data":"","first_seen":"2023-06-28T20:43:13Z","last_seen":"2026-05-01T16:24:39.952843Z","times_seen":11998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/InvestCard-5b048186.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d854b6d4a8ad6a5c409b08ea3d523726","sha1":"943c7d28fd317a370b5ca061ee41f22db47083e7","sha256":"ae5c2f691baaeabc2db8f3147b9f813a674fe9f0e923579747f56b5b96f11ddc","sha512":"b229383f72a2f38d7ad590163c933bf354a57d9c67148a40b39e690a56a423cf588026d0c0cd5b8b360677acfb9e5d1cd59ad65a58888fb141d43120628a920a","ssdeep":"384:hzJ58J5WtYHGhgRoMxJuB3j4n+AVRcwJKkwmzW1/X5/Xq/XB:hP8WtYGgRoM+Bz3AVRcwuc","tlshash":"0ea2a561d032c938e5fb78a0108c854476192feed2a18876b0fceb465b87c7c575e7ae","size":23360,"data":"","first_seen":"2026-04-28T02:33:41.782312Z","last_seen":"2026-05-01T13:58:35.297121Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d2b2b050757ba3d24426c42c3e4676f","sha1":"6a3359c5389d7d41f4b9647878b29cf654f5fc63","sha256":"da3abe33f5dd2abd814eb50229fb90d0ab61f7553b0154dae0cf129be7e7980f","sha512":"1c678470e263ef5bc0a5f8b44714ccd7cac330e2a61742d4735579da012208167e3b6672534f5ed217b285ff49c4204cc060936cf2f2d7e1625e10df79bed04e","ssdeep":"","tlshash":"b0f0eb130cd900af6f2710bd2b3faa1236a41113044ac020fc0e8720af20e7c1724acc","size":656,"data":"","first_seen":"2025-09-10T03:49:42.458429Z","last_seen":"2026-05-01T13:58:35.346215Z","times_seen":304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_392765_404284_1752474192.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d91938ca02d9b905ea1fb52860961c98","sha1":"5f56c8d7ebb28ce695a9f05da9fc1c0abb008427","sha256":"4c9f8555aeb237e769a3fe131214ea56c761b34365a10ba6c838a0df35c3ce40","sha512":"1f04a4de5a4e1cebea8b45bd9954de5274d944fa5d7590486b9233a0ac9a530992cac1c9f43faab93bf3bbe6f3d0dda9d7e20385b842fd69d6c9280eacc6a04e","ssdeep":"","tlshash":"6721c9471c63a4797ad6727b4b3f88ad3998a2432004cc10bc4dd4681fd09e20a9eee4","size":1183,"data":"","first_seen":"2026-04-28T02:33:41.757132Z","last_seen":"2026-05-01T13:58:35.324257Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/NavBar.vue_vue_type_style_index_0_lang-39e21835.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2121a2fe8c2393d5b240dd2bb3c218a7","sha1":"72674b199c8749d3169b21835db06a4f8899b34f","sha256":"2b029e1d7f128d11d6c997a91795dd8667d9c5dcde551be06f59323c5b219ac1","sha512":"0b07dea1cf3879c3db7234f1316b14d61a73ed2e4da6713380fa3f3e68f6caf941f20eca2fd88fb3e2630b9c78140950e214aaa67e387613ba93b3e3103776ab","ssdeep":"384:/bB+piye6YLVu5KtxyXKBP3gC6vhX6KSaHnUw9u/4uj2:/EvewrR957+/J6","tlshash":"29b23140e525cb7ccab623398e866444b24c5fced149a995f1fd282b37dacf47118bac","size":24829,"data":"","first_seen":"2026-04-21T13:48:47.877894Z","last_seen":"2026-05-01T13:58:35.31093Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1ca49f0e439cf34669924908e59b2897","sha1":"efea6ef6bd12f3ded99d07b429c6af21c23ed826","sha256":"9f9ee6011e8f88513c2761906180f430478c9d9835d4e74a211cafd3c79b955e","sha512":"f5dfd73abfc4c47819a1c10e68b974d2253a67fd9fb113e510809ee5ea650d5dd1f003dedcd6f88235e4e5b696f28c5e2f18526e794579f3b9f5a1d7db17bb21","ssdeep":"","tlshash":"fec08cc4b0c22d102602a91010af24e49024406770481b168c94dc882e224b09237e98","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-05-01T13:58:35.344794Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/#/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aeed8cee04c23305323c4bbf32df5ee9","sha1":"300d05e3ade915bd52526aa22905cba8b5f82049","sha256":"9b1b7dd121d874420af47ba81288f6424883b97290f8b504b8038d59e3e9d89a","sha512":"65c1e4c92c02877e1aef716dc82cc96803b5409db34ea97b7ed07e1dfd26d4d38424874e71254d0b51a112013af203c4f3131991cdae21ca12a5b039e2490413","ssdeep":"","tlshash":"a8c08cc5a0d62e001a52781022bf28f490244426b8481b038c99ec582e330b09233e98","size":148,"data":"","first_seen":"2023-10-16T21:01:42Z","last_seen":"2026-05-01T13:58:35.338888Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e71882b0be.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e71882b0be.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18978\r\nlast-modified: Tue, 21 Apr 2026 06:26:10 GMT\r\npriority: u=4,i=?0\r\netag: \"69e71882-4a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 52\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vvrBdevnFBMYQWFvG1jjdGjXdExI09jQMKc0pfYC5eWfQsb%2F838rIsg2fp2a%2FP%2BKQAGkZU5uS4REfHS%2Bqr7md6PQZo3I2JCAoTyc7iSOis5pvvmKFTQVHI36xLq6FqimEegVKmGC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb452fad45699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4ff778660712b0683d34ae42bc1d5c","sha1":"05265637e3fcba97e8fecdce8450ccd54dd1b9ac","sha256":"92bfc815f955ee275b0f94ab0aa54742a068b5e2b227bfdc6b4cefa5c81997b6","sha512":"689ce8a04406e551fe1f6e5e2875db48827ff9d0a1a86a3d96d6f077a5b94b88071d38d9aa797ada8dff8bf9a4040db043a979539b7e8564e3f3d3f8a5575863","ssdeep":"384:A4Yibri2tmmqi55lB7Oppn3B03Pud/+FWdTU3j:A4hbrXtmmqo/OpVu3PuUI9Oj","tlshash":"ba82d0db1069f8bb8111ee36724bf49bf53c07d076ef81142785b98d8208da5f796638","first_seen":"2026-04-28T02:33:41.649603Z","last_seen":"2026-05-01T13:58:35.293415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/sys/company/plugin/get-plugin-info?plugin_sign=96e06d929f69ef5736553085a575de7d\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651126\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 07:17:51 GMT","end":"Tue, 23 Jun 2026 08:17:48 GMT"},"fingerprint":{"sha1":"E4:6E:E8:0F:49:09:BA:FA:14:45:D9:04:38:62:26:F3:C5:BE:96:E3","sha256":"28:5D:C7:8F:3A:50:61:E5:67:F4:07:89:5A:0B:3A:FA:8A:41:33:8D:CF:D0:28:9C:DA:29:17:3D:CC:02:DD:1A"}}},"request":{"raw":"GET /sys/company/plugin/get-plugin-info?plugin_sign=96e06d929f69ef5736553085a575de7d\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651126\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 12:14:11 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: 9f4eb457edec0daa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://binance-usd.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 5ce24ed2-630f-4325-ae4a-0136788b5a28\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4726,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"23fef7b4415d0ea2418f8cd83dc72484","sha1":"b7e7096fcc0af8e6645cde1f7ab3e7db8f8f282b","sha256":"62b09dab8c601547555b22a475d966fd6c99f837f31f1f1ea56cc0142db764ac","sha512":"19e6d835868089ac30223e4fce0315a6f1ccbb841a1096a058b3d977e9cb12982082a48448955492eb86538193cbbec80d13c5c232d227bbe58b1eb6dd4bbc13","ssdeep":"96:22sQ6W7vyYDu34WDXtp+ZdSDrbndRSx2qydpXUtU4OIXUkjix:lsA7vyn3pzrzdRkWUtULmix","tlshash":"f1a17571a01bc963a2a358a831fdad619d5e87b8c0cdca69ed6cde194dfc8b1571200f","first_seen":"2026-04-30T14:56:38.353485Z","last_seen":"2026-05-01T13:58:35.314794Z","times_seen":3,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":40,"dns":15,"connect":1,"send":0,"wait":232,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/BaseMainBtn-cf1599ad.css","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/BaseMainBtn-cf1599ad.css HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fXVpWPpQ0117EvooI5ocHU%2FjfAfbuUC5xpOfrFKjZiaZMILiTfE8vMkvvwBhP9yzVNLzxuU0sLVfdVXUuD5MAJwl5Zjns7Ihw5gyKep0DQ%2BRQjjvRwMWI8Y1joQsOpdQkP8%3D\"}]}\r\nlast-modified: Wed, 24 Sep 2025 08:42:59 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"68d3af13-da\"\r\ncf-ray: 9f4eb4509a905699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c1fb97309cdf49465e4f0c30d3076578","sha1":"a89aad9837fa74c4b617ae97df0cb4bd6be84cd8","sha256":"cf1599ad93a05243bea5ed51b989a7bf72f5292a94b612154a39d30d50e35e9c","sha512":"c43620fa6919ff89a83a41252ce19bfef4cf68662f34b0a054749d7293c2dcb601ba2dace836f22635988cd596f8bc16b3f7b331a7eb622cb0df89e256ce9030","ssdeep":"","tlshash":"4ad0128d3191b97e18be87cc75ec50214b8038975f51beb9655429dd43872773c7305e","first_seen":"2023-11-04T18:18:58Z","last_seen":"2026-05-01T13:58:35.323507Z","times_seen":216,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/BaseLogo.vue_vue_type_script_setup_true_lang-07f76166.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-07f76166.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SATGkS7B1orI2bnTnXdVCcVbeQG1HjSCESeTFSnVofvezwitZmn69t9KOafbm%2Bqbd%2FbfGPbDvJ0M2QsG4%2BgaDp4KwgaYQwTnDt5usKfb42L%2FuB0iqvibguy2w%2FbzWbNhRZE%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-20a\"\r\ncf-ray: 9f4eb450ca9a5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (521)","md5":"e82062f1a921352aef9fef6dce1b7208","sha1":"8dec9bae4ce5cf3ea9d117127bac8adc1a771889","sha256":"446cd1f6dec844102e2a5f329331230f622aa4d199b50778c9932e3b16a92c8c","sha512":"a6e50efe75c3345bfff4cbf85aebc5b6c03e8f155b4a34523610c1ec6269885cc714d47fe631b821b25d9ed8808a40076f3206a574da49edb80a5dfe18f53593","ssdeep":"","tlshash":"9ff0c00f5c2a91ff40a658982b47604111095fbdc6209dd4f3e52274624186a701d668","first_seen":"2026-04-21T13:48:47.863202Z","last_seen":"2026-05-01T13:58:35.295366Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e712ef5df6.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:09.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e712ef5df6.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18770\r\nlast-modified: Tue, 21 Apr 2026 06:02:23 GMT\r\npriority: u=6,i=?0\r\netag: \"69e712ef-4952\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GF0AHPt6FfqV9HZfmOhru0x%2BY6LyHqu%2B9LAJvMdKLaxAJlyPmF3oVVQueAFAgbYPShvE5jSbgKe0UJeuBW6muj4LjiIR5gnwpKFy4JlNuFSyfy8wYvpr2GzX%2BzAcHtLxo%2BHZm1oP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4500a825699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18770,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2bb46ef45f442835cfd6567e33698d58","sha1":"497882554babcaaaddafcf9219a8378224badea5","sha256":"8e08cf992a6a3ca7fe77fc9e2b146358357144b305c6262d1cd113a558cc961f","sha512":"5cb5c4d25d084552a8557d275f9941829b074e81ef67d5ac6389d76cff927347bf526e9b5b0709aca7de1ab5550f482d0b641c9127620eeae5e1376672d0980f","ssdeep":"384:yClLKAeNox0yogataCjwdShcZIKyC+nkrOe+QOHXYu:HMAeDedSSZRChX","tlshash":"0382c0fe74079cba9c0c6e116c415664ec24d6a16ad4670e1d5861f6addfbe03c46322","first_seen":"2026-04-28T02:33:41.855803Z","last_seen":"2026-05-01T13:58:35.289738Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/tabbar-5-1-88ebdc42.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/tabbar-5-1-88ebdc42.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Sep 2025 08:42:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68d3af13-109bf\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVUJjk4BBjVdF16uBiQak%2BUOtvYCjmfzoUSZvEqlqbIKJQ32AbwW98UGvyCCi%2FY2eKbwcL%2FA1RA4sqUO5OZpW39MSY6oAKwsOdIt908fRu%2BBA0o0Xbt1ws%2BBbNPh1GuKjRI%3D\"}]}\r\ncf-ray: 9f4eb450ca985699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68031,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6f426d1d419eb7c29b054c7ba217aaa8","sha1":"88a040864ff5fcc97b874157809a9d1a5ccb4da3","sha256":"12f422d1f0ff02d2dcd3de682631b23ec56050ff895881306df19ae0003b21cb","sha512":"02407a19a3d1082c613e585050beab002f06f4e6b0bdf47e8b1c2aa45780b00974731190a801308f803a1ea9866d06447fcd72dba7048b9bcef755a1fa1b2959","ssdeep":"768:uVxpvoZ8USsO3E2443m5upG1CrMG/O3LYNTw9Hn9LxpvoZ2UssOWE2143m5upGKz:usO3E29Aj1hOT4n1sOWE24AjK5DT4n3S","tlshash":"6663e07631195ebfaee18862f20a0205cdb1169b530ef299cb94b2b754dd721ec1bcf4","first_seen":"2025-07-12T13:57:48.771979Z","last_seen":"2026-05-01T13:58:35.289278Z","times_seen":119,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/index-c6f4ea70.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/index-c6f4ea70.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-795bbaea.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-a7b3a\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2BDTqSdo3O0g0C2EhSYjZpfnYBqEViKdKlipS1vLOqJeC16ykz3Ta0p5Ies4F2Hg0%2BjPXHNdR8i9VOwLs2hySiclCSOTSTEbRjnEGy8f3cmKWvsYD%2FqOo4%2FvTOiMKsXykmE%3D\"}]}\r\ncf-ray: 9f4eb451cab55699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":686906,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"b7150983d5d85e447e3096f683c2d6db","sha1":"ebf2db10ddeed80e27cc0447f9707b953c3ca4fb","sha256":"388d5bbcc40e403eee741b355d3c737f9349d859319169080abdfa4725d36d80","sha512":"d8045b0388f0e2750be845e00c7f9d1224f35efd0d88ad28a8df7e7a08eafe36cdca0d17cdb4556b6a590246972f690b7972ebce792cf4452b2baa46c24cf252","ssdeep":"6144:DG6T9i1XYK2MbqEVdnw76I0BerpqgVAeSpV9fNcX/ZT+esEJuXG79SY0nbWozYx8:y642MbqEVdcUp/Ear7","tlshash":"3ce4f656e216eb3cf9bb92a4d199185072992febc0508165f1fc0d674be2cbc2b0c779","first_seen":"2026-04-28T02:33:41.704707Z","last_seen":"2026-05-01T13:58:35.292123Z","times_seen":5,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e725bedc6f.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e725bedc6f.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18978\r\nlast-modified: Tue, 21 Apr 2026 07:22:38 GMT\r\npriority: u=4,i=?0\r\netag: \"69e725be-4a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2FcJpnp6%2FufAaO2%2Bg7s7QXpRYywUd2P08FVqek%2BlhsbUBOTlvfkNT9H62xXODXMBf6mlkGcdJ7SmIpKt6gNRsTdOPPY%2BqVDQuyY5ymTxqtpnudB%2B%2B541kC4vfPsl0T2nOa%2BBpWph\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4537ae65699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4ff778660712b0683d34ae42bc1d5c","sha1":"05265637e3fcba97e8fecdce8450ccd54dd1b9ac","sha256":"92bfc815f955ee275b0f94ab0aa54742a068b5e2b227bfdc6b4cefa5c81997b6","sha512":"689ce8a04406e551fe1f6e5e2875db48827ff9d0a1a86a3d96d6f077a5b94b88071d38d9aa797ada8dff8bf9a4040db043a979539b7e8564e3f3d3f8a5575863","ssdeep":"384:A4Yibri2tmmqi55lB7Oppn3B03Pud/+FWdTU3j:A4hbrXtmmqo/OpVu3PuUI9Oj","tlshash":"ba82d0db1069f8bb8111ee36724bf49bf53c07d076ef81142785b98d8208da5f796638","first_seen":"2026-04-28T02:33:41.649603Z","last_seen":"2026-05-01T13:58:35.293415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/chat/msg-user/create-user?plugin_sign=a2cb8907b8125e73d654b9999180fb81\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651554\u0026_lt=\u0026_u=61ddbdc777c7b496af8e8d1c75858381\u0026_xma_=392765","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 07:17:51 GMT","end":"Tue, 23 Jun 2026 08:17:48 GMT"},"fingerprint":{"sha1":"E4:6E:E8:0F:49:09:BA:FA:14:45:D9:04:38:62:26:F3:C5:BE:96:E3","sha256":"28:5D:C7:8F:3A:50:61:E5:67:F4:07:89:5A:0B:3A:FA:8A:41:33:8D:CF:D0:28:9C:DA:29:17:3D:CC:02:DD:1A"}}},"request":{"raw":"POST /chat/msg-user/create-user?plugin_sign=a2cb8907b8125e73d654b9999180fb81\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651554\u0026_lt=\u0026_u=61ddbdc777c7b496af8e8d1c75858381\u0026_xma_=392765 HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 374\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: ss_uid=61ddbdc777c7b496af8e8d1c75858381\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":374,"data":"source_url=https%3A%2F%2Fbinance-usd.com%2F%23%2F\u0026language=en-US\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026user_id=69e7240eccf9229fdb6198bd2d8d3c7d\u0026data=eyJwaG9uZSI6IiIsImVtYWlsIjoiIiwiZGVzY3JpcHRpb24iOiIifQ%3D%3D\u0026is_sandbox=0\u0026before_source_url=\u0026label_names=\u0026custom_fields_ext=\u0026update_label_type=update"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 12:14:11 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: 9f4eb45a4cebc272-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://binance-usd.com\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: c470a25d-8dfc-462e-b1a1-38f88197cfd9\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"683eaa2bd35008b262b2b7962aa1ce35","sha1":"b66237f517f99110f8eee7e40fc9101a525cc926","sha256":"bc810a188d7b22688f5881632b1df4a7b701e40c27d657dfbcd334d25e374bf1","sha512":"e6c7e443ce260ac2f4eb4d2417eb4964a95d5409fdbe91cbbc0ece3362e75247599b15c112a2d3374eed69d660dd427a516fc38b358332068aa522177c2545cf","ssdeep":"","tlshash":"f7c08c12aa9d62a30f81110aa025222221b414a49e15aaeec8f806a8cb4c7e8338a411","first_seen":"2026-05-01T12:14:39.485694Z","last_seen":"2026-05-01T12:14:39.485694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e7189c3646.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:09.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e7189c3646.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18978\r\nlast-modified: Tue, 21 Apr 2026 06:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"69e7189c-4a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 52\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4FvBPHslLQAsxYVe7vLshoa2ngC8EftFnhMW6ejkL6ufSEd%2BSsCXRDUf20k7X8sBFrU9VSeks4k5F4GwHh9v6TuRpJycFjXtdEtZn5%2Fxl02tyT%2BIBEAW%2BayythFCbZefigmoqXQ2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb44d5a675699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4ff778660712b0683d34ae42bc1d5c","sha1":"05265637e3fcba97e8fecdce8450ccd54dd1b9ac","sha256":"92bfc815f955ee275b0f94ab0aa54742a068b5e2b227bfdc6b4cefa5c81997b6","sha512":"689ce8a04406e551fe1f6e5e2875db48827ff9d0a1a86a3d96d6f077a5b94b88071d38d9aa797ada8dff8bf9a4040db043a979539b7e8564e3f3d3f8a5575863","ssdeep":"384:A4Yibri2tmmqi55lB7Oppn3B03Pud/+FWdTU3j:A4hbrXtmmqo/OpVu3PuUI9Oj","tlshash":"ba82d0db1069f8bb8111ee36724bf49bf53c07d076ef81142785b98d8208da5f796638","first_seen":"2026-04-28T02:33:41.649603Z","last_seen":"2026-05-01T13:58:35.293415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/api/public/get_lang_json?d=1777637649499\u0026lang=en","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:09.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"OPTIONS /api/public/get_lang_json?d=1777637649499\u0026lang=en HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://binance-usd.com/\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:09 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v95qaF3eXgAjx%2Fp%2Fw3oh2ztJONI6ZuYdIn7f5fXcCOtkroSOE%2FYhXxJv6KdpDVWQWfHmJZXETvbr5e24oHrJ4tkbI94LKr2fiHTyBNnG7QrlyWjjocwNCxSGM3%2BsvDJtQ7iCQBpu\"}]}\r\ncf-ray: 9f4eb44d7a695699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/InvestMoneyCard-f31b279b.css","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/InvestMoneyCard-f31b279b.css HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-25d5\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HjFy95DTW16Hn2bWmEg3PALEvIz82qcNeLXrY22FaHLi4b7E5L4W99zvUd%2FrLczUEk3G%2FeAzs6tPUMI8P0Ka0H025oADvtNYXXjybSQ2krk%2F7HSiQL9AKeUVU8KYESiXrJ8%3D\"}]}\r\ncf-ray: 9f4eb450aa925699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9685,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9684)","md5":"72ab2a69182bd90eecfaaa1518b4739a","sha1":"bbde48c6b15cffcd4bb39a37c671c78b88fcb621","sha256":"f31b279b999e748942d7af3505d8b97fdbbf90ba4adbab6d8c25e208446a582f","sha512":"ca58bedd81145b2c63192a886cd21e8a3ced5449961533a82957f057abf8520cdb52135c6aace30b039f75fc4cf32c67cf7fddb368c3333539a6f1134b79f606","ssdeep":"96:wUOgRUx9WDyx91XhjIiCIEUL2oDGZi/7odTFHOu/KjHbQtYYEW2G7oldWzQron:aLPx/VInI2oiZGTcKjH+KYodHrS","tlshash":"f0129624134a5128fa77d4baf4e0ca5f7520a243e6736a19c1266775cfc32eb1ebc358","first_seen":"2026-04-15T23:06:55.540996Z","last_seen":"2026-05-01T13:58:35.328571Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e724858352.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e724858352.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18978\r\nlast-modified: Tue, 21 Apr 2026 07:17:25 GMT\r\npriority: u=4,i=?0\r\netag: \"69e72485-4a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IoE0DEzY44c%2Fbse9JHSbap4VKU8MEil6%2FlEuZz05WaoCw5nb3J8G59uKdpslScVmiMmF5KQd8nWdN1JHoyQ%2F5pDFzHQvu%2BLNMl6lF38h0PvPkmfBwe8wkarUfbsAg0LpGWrXl6Cd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4536ae05699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4ff778660712b0683d34ae42bc1d5c","sha1":"05265637e3fcba97e8fecdce8450ccd54dd1b9ac","sha256":"92bfc815f955ee275b0f94ab0aa54742a068b5e2b227bfdc6b4cefa5c81997b6","sha512":"689ce8a04406e551fe1f6e5e2875db48827ff9d0a1a86a3d96d6f077a5b94b88071d38d9aa797ada8dff8bf9a4040db043a979539b7e8564e3f3d3f8a5575863","ssdeep":"384:A4Yibri2tmmqi55lB7Oppn3B03Pud/+FWdTU3j:A4hbrXtmmqo/OpVu3PuUI9Oj","tlshash":"ba82d0db1069f8bb8111ee36724bf49bf53c07d076ef81142785b98d8208da5f796638","first_seen":"2026-04-28T02:33:41.649603Z","last_seen":"2026-05-01T13:58:35.293415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets-cdn.salesmartly.com/prod/project/gw6qsf/d4w/integration/plugin/image/20260421/1776784917285/image_1776784917285_c28a429c02611b07a8a7ebb5031.jpg","fqdn":"assets-cdn.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"108.157.214.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /prod/project/gw6qsf/d4w/integration/plugin/image/20260421/1776784917285/image_1776784917285_c28a429c02611b07a8a7ebb5031.jpg HTTP/1.1\r\nHost: assets-cdn.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=61ddbdc777c7b496af8e8d1c75858381\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 74848\r\nserver: AliyunOSS\r\ndate: Mon, 27 Apr 2026 04:59:14 GMT\r\nx-oss-server-time: 39\r\nx-oss-request-id: 69EEED228211433630A48AFD\r\naccept-ranges: bytes\r\netag: \"EF06CA50047FBC11D2DC850336F8ED76\"\r\nlast-modified: Tue, 21 Apr 2026 15:21:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6871224543162321910\r\nx-oss-storage-class: Standard\r\ncontent-md5: 7wbKUAR/vBHS3IUDNvjtdg==\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 419f3eb3d74bedebbef6fc91b3f54a36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: sGgxaw0fm9CuFljVqXMx_x7uRvwSl9ZgJwIPSvKJq-u8di5z1SBdfA==\r\nage: 371697\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":74848,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 744x662, components 3","md5":"ef06ca50047fbc11d2dc850336f8ed76","sha1":"2451649b39a735dc18c087943c56092ea4965345","sha256":"73375e66bb14d235a4a19320744834f2847dfd6c26e49a21e1c1b83adbb3c7f6","sha512":"fc6e4013564bc0a726157fb467106249d41ab7ffafad24ef3f6909b82cae0aaee89f1df86e21f0bdd37eca134f1581315260ab1e79f48291fa54d81c65064ad9","ssdeep":"1536:qNWVkEELIFAd+BnzokcqP2AO3PfBVocgc4p/12EetURbp4Zm3W3Hr55:aWr9Fu6zo5o2AIfjo24p/12Dek95","tlshash":"f9731262cbdc8b51f19a867f84e42ccf7317e9f65982b5a3b11cdae0492034c4e7d992","first_seen":"2026-04-28T02:33:41.725135Z","last_seen":"2026-05-01T13:58:35.326591Z","times_seen":4,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":44,"dns":14,"connect":8,"send":0,"wait":11,"receive":11,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/tabbar-4ecd2a86.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/tabbar-4ecd2a86.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-1de51\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70fHzW9gHPGHvostYl7VJWF%2FU1mRRVaYUYv5liboh2PVX%2BmLPor%2BbFEjR%2BoqvaeMV%2FsdaHX1wlKLSsMRlyMvMRsoF40OepefRgvbe9h%2FudmLsiy%2FrRCSTFl8X49k5BP67Ws%3D\"}]}\r\ncf-ray: 9f4eb450ba975699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122449,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3d55d0506b6d45dfd62243a484df60f8","sha1":"8a25b8641518b0b1a11281f1970edd87f5f20c4c","sha256":"80fc8f31743fde0428f544a308dc8e88c598921d4554dbf73ed1ec77c1e5438e","sha512":"f8d2ced8bfc739ef423631bd5e52a155444e2c3d64f3d6752d7ef72c4c393ff7ab7d07ca40a23f7ecc427696df82dca7eabaa798d139b064d28e02a5afe0509f","ssdeep":"1536:L97rv7AmRmcqR19z3FEjoFc+8osT0vl6hkE4lf0qArT0EJTRsEpmKf/gUOsE7TR4:hQnze298Ngyr","tlshash":"3bc3d8848a05d57ef13264425c5c0c42714dbfe3e8199ab6f2f8af5927d1bb8632e327","first_seen":"2026-04-28T02:33:41.721464Z","last_seen":"2026-05-01T13:58:35.292576Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useNews-8a42c888.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/useNews-8a42c888.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bqwz0Q%2Bexo3BPBZgL9a7OwdklzgcolI9sX4JLG0WJ%2FtuWr2hNGDlub8o0qYHpOlxt81NJ7xhI99v2vu%2FC7iX2jiJkWPNDoS5rPCgiZQzgLIA6%2Bf685wFPm5V%2B4%2Bdhmk6z%2BE%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-394\"\r\ncf-ray: 9f4eb450faa55699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":916,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (915)","md5":"0cb7b213b7bca441989d3a3863ce8b79","sha1":"c145217e9c6f7add9019c9ca10424dcdcbaa2478","sha256":"a7d1a73a1c22ba6bb0933d372965a847f0f23515e3ca0f393d60ce5608b18d95","sha512":"9501e9276d622186e62f3ac0c6ef0c0f773bd3149e1e846492f69b8db3d785096e41f1f1d89a78c9c97c74fcff66bad78d05ad10f200d244c20234bad5d44750","ssdeep":"","tlshash":"9311404db066d3f861bf1c0c24520018216b5b847931e8c0a3be09931a62cf0e53ba3c","first_seen":"2026-04-28T02:33:41.846494Z","last_seen":"2026-05-01T13:58:35.291276Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useCompany-d95bed5f.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/useCompany-d95bed5f.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O4txnCo1arUNCKKsbsjxbzKzDwnyPWK%2Bit17DebcOMuNVNv82uDtGMoSDvUEXuLvhnwGp9QDq57WnlmaB9oRHSMF0uIhV1VZRvnBc3G3azc64qrMrWApfchSB8UUp5Kub9U%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-e3\"\r\ncf-ray: 9f4eb4510aaa5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"dfe9033e730d9f42f20187c47e5907d2","sha1":"d30bd194a5670d525289ab008fef0f54f19faad0","sha256":"07ad49594dbe1f8ed045b89457befeb5841c7c2840f5c50e9016835d053b0061","sha512":"e63d1d39cfb26234f4d7d9594eada724f3302b83ba95debc627d0a9588f986b82a4a4a3b0e1582213437ea533da933b27dc09e41be49b6b06c78b0b6e889a59c","ssdeep":"","tlshash":"fbd09728a00413f912b7389c5338b82800a2a170330a86c0891a0e050be6ae25167e0c","first_seen":"2026-04-28T02:33:41.796208Z","last_seen":"2026-05-01T13:58:35.294781Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/tabbar-4ecd2a86.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/tabbar-4ecd2a86.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-795bbaea.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-1de51\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xcOfljnHHwmIR8RVCulg6hMOzCkSry0BaKZDOxWDCTsWWRO9OXg%2BCZmMrLIlCZ%2BWCD1SxlSsRi2mnZDESbqKh9kXrk2o2Z3rIwHWqyE04v2sXstGykRIwCILQLyLjtDZ468%3D\"}]}\r\ncf-ray: 9f4eb451aab35699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122449,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3d55d0506b6d45dfd62243a484df60f8","sha1":"8a25b8641518b0b1a11281f1970edd87f5f20c4c","sha256":"80fc8f31743fde0428f544a308dc8e88c598921d4554dbf73ed1ec77c1e5438e","sha512":"f8d2ced8bfc739ef423631bd5e52a155444e2c3d64f3d6752d7ef72c4c393ff7ab7d07ca40a23f7ecc427696df82dca7eabaa798d139b064d28e02a5afe0509f","ssdeep":"1536:L97rv7AmRmcqR19z3FEjoFc+8osT0vl6hkE4lf0qArT0EJTRsEpmKf/gUOsE7TR4:hQnze298Ngyr","tlshash":"3bc3d8848a05d57ef13264425c5c0c42714dbfe3e8199ab6f2f8af5927d1bb8632e327","first_seen":"2026-04-28T02:33:41.721464Z","last_seen":"2026-05-01T13:58:35.292576Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e71ea596e8.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e71ea596e8.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 237108\r\nlast-modified: Tue, 21 Apr 2026 06:52:21 GMT\r\npriority: u=4,i=?0\r\netag: \"69e71ea5-39e34\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ICMIHSB6Wjc0THDb8MtrX64TBoWDDPWk%2FQiApG41XxvJwnQqysm9ZDI4TD1%2B6WpKsUSPmLBWQFTF%2FY8HJmGihwlSMr8hPwfa31IHO2TwfZ4DZvB3HYWLIpTuuS6THyEfHEeShOPb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4532ad65699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":237108,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x658, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"26e95ae6c55cd00f7eda6be4722bf2a2","sha1":"47602aafc98a9a95ebf89832c97b99197d94701d","sha256":"61d2d768ace5d8101609c9d2e4e0c8409bfc7d451c705d3757b8721ca8588e7b","sha512":"537ffa16f4aeed409147cb9713255f0ab4979e85009b1b3aac82db9264a3bbeb43f59624ea14dcd2259e6799cb6d4f43fa6cb1e68448fe16050c2a14285de98c","ssdeep":"3072:s5zkfmDptYPlFJJIL13mQNHeCapjp6bM71QSJOIRCD+sQQA9EojFEiM:Swfy13mwaR71fOPDWQA9EqFEF","tlshash":"e23423ea73356c7a91c3c73f427bd26a431c3785485a7c85898f6c9d8f0990269adf31","first_seen":"2026-04-28T02:33:41.669634Z","last_seen":"2026-05-01T13:58:35.3054Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=733c96278a4f986a1bf68b1d95b8b551\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651562\u0026_lt=\u0026_u=61ddbdc777c7b496af8e8d1c75858381\u0026_xma_=392765","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 12:46:38 GMT","end":"Sun, 14 Jun 2026 13:46:34 GMT"},"fingerprint":{"sha1":"4C:14:A3:50:BC:B3:C2:AC:E9:F6:88:D4:36:B2:E6:AE:E0:D4:64:D3","sha256":"C9:AF:D2:80:FE:11:04:07:0D:92:35:3A:19:79:9F:31:89:4A:2E:34:36:0F:DC:BD:33:1A:A8:E2:82:15:41:42"}}},"request":{"raw":"POST /client/log/log?plugin_sign=733c96278a4f986a1bf68b1d95b8b551\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651562\u0026_lt=\u0026_u=61ddbdc777c7b496af8e8d1c75858381\u0026_xma_=392765 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 743\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: ss_uid=61ddbdc777c7b496af8e8d1c75858381\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":743,"data":"log_type=CHAT_MSG\u0026data=0qH8PTXG1nmb1nohMhHG0ec5rnRhBdH40NYVyAKh1nmEtuzEPQcV03chN9XqfQzqyh8ht3zZrnkhMhyhBdHQP3zSN9VvyAKhyh8hrQjWtazqrnshMhyhBdHqP9zwNScmf3DhMAspyGrVfGIEP9khMhH9lCkqMCkkBAHbl2fSI5lSM2y5l2RSldypyQj%2BPQtasntVyAKhrnkwXXlhBdHafQ8hMhHKtTc8f5KWB9HEPQu%2Fs9DwtNIvBQIWPCFABqypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6Ryh8hP3zGN9c%2Bt3OhMGphr3HnrNH51nz%2FyAKjBdHV03V5t3V%2FrarVfGIEP9khMhyhBdHVfGHWfhyiyGwfyQaVfSI%2Br9XfyAEfyvORPNX4sNcEP9kRPSYVfQu41nz%2FyTt%2BfqY%2BtTcVPNY4rnoRP9kRsCYvsNc%2BsQu5rCY413u4y3cErdY%2FPSoRsnjpPSfRPNX4sNcEP9m5BV8hbCypyGI4PSHV2QuwrNlhMVwgyQm%2BPnDhMhH5snjVf9a%2BfGcp0Xz8N9tkITIV1uzp1NI4yh8h19XmD3u41dyiyQVvyGatbN4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 12:14:11 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4eb45a5fc8569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-05-01T13:58:35.309294Z","times_seen":1875,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:07.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Fri, 01 May 2026 12:14:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Apr 2026 10:29:48 GMT\r\netag: W/\"69d2399c-1c675\"\r\nexpires: Tue, 05 May 2026 12:14:08 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-05-01T16:10:13.781337Z","times_seen":576,"resource_available":true,"data":null}},"time_used":2153,"timings":{"blocked":1054,"dns":1,"connect":24,"send":0,"wait":42,"receive":0,"ssl":1029},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/api/user/app_info?d=1777637648975","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:09.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /api/user/app_info?d=1777637648975 HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-ctime: 1777637648975\r\nst-ttgn: 1c31a460226a251fde47427b702aa124\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:09 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h59%2BBQO1ulYQI0eqqK3TcRAVy7mSPQj4f7phPbhMaVuA06VYg9aZC2vjLiPt3Ux5XHSNe03UzaqWqm8jZ0mf%2FERAEiRSFFhS3ltW1q5esgStffZISTqRjcFeDzMuLcYYKId%2BWUOp\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb44b4a4d5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27785,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"17c191eb3b39f6bef23f7a57b737c6f9","sha1":"ec3b03e61adca90fe6bf7285185fd134969e3e12","sha256":"186033ded35257b3a50f5d81b84fd3740b985ba18024884dd9b92e4313f360d8","sha512":"1b5d6e2b34f38de022abec2afeba2d56495db03350c30fb8874e08f8f7188b3dba8d41c1e8355f1ca2c860f81b3e191c033bfb239da440c36da4c91823956d3f","ssdeep":"384:L3a/kMTN0SAGrImX6J/iBEKEICR2hYSIGRins9H+yFjGJlgzpNcMKTGOPKpMB1MC:Ta/kKBdg","tlshash":"7cc2116e5270c8a7cbf939cfb6c72a29507935c1f948059c5339fda802ec52ac69743a","first_seen":"2026-05-01T12:14:07.71643Z","last_seen":"2026-05-01T12:14:39.507475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/NavBar-faa64b88.css","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:09.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/NavBar-faa64b88.css HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Oct 2025 11:24:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68f2275d-5c7e\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aS6pR%2FP8o%2F4Exg9WJOX%2FUmCKljLqSh%2FKzyeNukN1es%2FhmEnJcm0XQNMMvUZ0HpZ9UJ%2FGd529naUVRfbnR2hmXIG%2Bqc17WCvV5ZpCwuRq8OGU4Gc%2BG1XwVKMzQq4%2BjUCU6D0%3D\"}]}\r\ncf-ray: 9f4eb4508a8b5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23678,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23677)","md5":"468f2ddc6e3aa1b8eaad881853ad4eaa","sha1":"3dc5d872bdf5b920b14a9785be130086ca981ff1","sha256":"faa64b884a32121e72154c982db040a08bffc528d5f6605f6355486a31bbc7a8","sha512":"562cb73416ff54d30da51daa11b726bec115156c4359c701af70648563a3f68b876aaa59cbb0af5aa2b4d207de044f31919e59c492a8a8c15e7a2b4b1fe4fc9b","ssdeep":"384:9Qus6Dn1lvW04hbGC2WNuf1BVyGQ8ApopxgS3JS57:eu1D1VN0bV2WNuf1yGZlL+7","tlshash":"16b274e403a4b33cff1fa41666ed8ac92e149209c237f9599e017336d1df29716b9d88","first_seen":"2025-10-16T04:09:02.764428Z","last_seen":"2026-05-01T13:58:35.310388Z","times_seen":158,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=2dfb313f9973416248758b4c448585f5\u0026chat_user_id=a5ef914b39cdc01f67756a2b99781a1d\u0026direction_type=1\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651924\u0026_lt=2dfb313f9973416248758b4c448585f5\u0026_u=61ddbdc777c7b496af8e8d1c75858381\u0026_xma_=392765","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 03:56:18 GMT","end":"Fri, 19 Jun 2026 04:56:14 GMT"},"fingerprint":{"sha1":"3D:A2:6B:19:97:82:23:11:10:B1:04:28:BC:92:55:73:D4:24:D7:6B","sha256":"FD:D5:E1:0F:63:14:4C:3D:C6:7A:C3:2C:AB:8E:7D:73:CA:F4:E3:D8:7B:E6:08:8D:E9:3C:FD:57:04:B0:51:A6"}}},"request":{"raw":"GET /chat/chat-msg/unread-msg-list-v2?login_token=2dfb313f9973416248758b4c448585f5\u0026chat_user_id=a5ef914b39cdc01f67756a2b99781a1d\u0026direction_type=1\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651924\u0026_lt=2dfb313f9973416248758b4c448585f5\u0026_u=61ddbdc777c7b496af8e8d1c75858381\u0026_xma_=392765 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nexternal-sign: a84ea60b7ba341c59292bae0fbc0ae4d\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: ss_uid=61ddbdc777c7b496af8e8d1c75858381\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 12:14:12 GMT\r\ncontent-type: application/json\r\ncf-ray: 9f4eb45ce86156c0-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://binance-usd.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 93064375-6ed5-4603-b0aa-c883c558e2e6\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"48016efe262190df0ad5b1d7340a60c4","sha1":"1cd9c973630bf59e2c479cada9105bbfad39dec3","sha256":"6e59b9f826a2a9b503fb05fd33448a0583d30552aed790dfea6cb19e74bb409c","sha512":"274e846e9ad5c7fdbff3fb665809347f229260b2b2eb491f386a5d1084a7fd7526a4e0eb331c71c4eeb14a98143925c29e2702869c11883176eb14ffbba9993b","ssdeep":"","tlshash":"4ca002562c2c1e4b0f0fe489780d1b17d6e911445a252712cdcc915c870da5eb5c7521","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-05-01T13:58:35.32807Z","times_seen":1465,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/index-89c6254f.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/index-89c6254f.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sC0BrS4cUWVCSw0lMYDQSfInaLo0MWs7Aqo4YlULXUzMNHnrBzWslJuRn%2Bf%2Fw1JWouvCZk1KRwOHcz8E%2FhTOmh1teuF%2B8g8OyRqa5TI7ruDi3zvaFq56KVSAs0yUaAe2DjE%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-385\"\r\ncf-ray: 9f4eb450faa15699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":901,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (900)","md5":"9da16dbf24c463162ba5c57752cc748c","sha1":"dd378aa977ec0c40a73739059e527d61bd0f769b","sha256":"77fa1e99de5e1610b5f29f4f6656951dd605c6decdf8f3142498a156a52e814d","sha512":"1d29cb3517d8e0b6788c8bd63ef86fe4c4d374a5435c3a02fb7892a438c1eef22c7c52978bdd00a0886d4891cb9b6294d05ecd7be0cc855e12c4353eb003b365","ssdeep":"","tlshash":"6311232bec95f1704153989ca6680ba3a3cd7ed8213093d4b65e8d7807641ec703a60a","first_seen":"2026-04-28T02:33:41.823137Z","last_seen":"2026-05-01T13:58:35.30482Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/api/public/index_info?d=1777637649984\u0026language_type=en","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /api/public/index_info?d=1777637649984\u0026language_type=en HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-lang: en\r\nst-ctime: 1777637649984\r\nst-ttgn: a366153284c6e3fc360e1bae7d02303b\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c5CgeLgJTMvcf1NHdxM3xKcngOEQZgokCweJ1%2FAhH1wRv1E5klTT1h0hZTYQmEh%2BClZVBePHfgA7roE7fi9eaXqwjgxNsnnC4THy8syO%2FV78QYFDUjAfzaoZgbhwl8s%2FZn4vK2z1\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb451aab45699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8024,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d065f3c9919092ece8adae2e0bca6fb9","sha1":"ef68b3e5e582d97ea07cf73c5c661204ef973dba","sha256":"9fb827e3a7cec4f9a1b5dde6fd774c6822eb2c926bf27e36f9815bc7085efef8","sha512":"c8d356306a8d7925fd17207dff2b8afc4aea968eae286a3af34b665a4eb9aa996b46f7b314d257eeb68a885b1bff7938df57f8fa900dda20c24b15fc7e8c7246","ssdeep":"192:IIYzIQ3z7zOV12FXMuT6wH93W7glmguVDJDVDla87:T+D7zq1YT9dmMg9F91wA","tlshash":"27f100e1727f4c0082f62ec1be8e3591a97df05b9ec4fb64da2ead7c45e4063426b811","first_seen":"2026-05-01T12:14:39.511495Z","last_seen":"2026-05-01T12:14:39.511495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/css/chunk-common.047ebad9.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/css/chunk-common.047ebad9.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Thu, 30 Apr 2026 13:39:03 GMT\r\nx-oss-server-time: 5\r\ncontent-encoding: gzip\r\nx-oss-request-id: 69F35B7788D14B38368D2F8E\r\nlast-modified: Tue, 28 Apr 2026 12:27:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15301035701198459371\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: kuhLBjVJMHRRHJR6J/nD0w==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0ca3a24436a7d86916b35130b21285a8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: H6IRJlCp5vNIsMBEQ8v3BMLj-Dkd0VLiBqjvGw9NjjXHiy2ouAPHHQ==\r\nage: 81307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3567,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3567), with no line terminators","md5":"92e84b0635493074511c947a27f9c3d3","sha1":"1063727a5ae72bb23c46dad693b4b45828e2a74a","sha256":"85172738795fe7c2d724963c00cddb49256a70767071cea32d1729b809702ffe","sha512":"9ee606d5139307b4a204d111caf4297943a1894038526b59e9c0a4bd5a034fd328cdfc85edc24dd76732407f80e93aafa317fa53d85471a7dc45c23f4a72a854","ssdeep":"","tlshash":"e2710de5d50814ed7333c902a385b298ad92f5b2d8e04e67f01f562c8ff2655a291f39","first_seen":"2025-08-28T20:02:37.799245Z","last_seen":"2026-05-01T13:58:35.28648Z","times_seen":1773,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=2dfb313f9973416248758b4c448585f5\u0026chat_user_id=a5ef914b39cdc01f67756a2b99781a1d\u0026direction_type=1\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651924\u0026_lt=2dfb313f9973416248758b4c448585f5\u0026_u=61ddbdc777c7b496af8e8d1c75858381\u0026_xma_=392765","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 03:56:18 GMT","end":"Fri, 19 Jun 2026 04:56:14 GMT"},"fingerprint":{"sha1":"3D:A2:6B:19:97:82:23:11:10:B1:04:28:BC:92:55:73:D4:24:D7:6B","sha256":"FD:D5:E1:0F:63:14:4C:3D:C6:7A:C3:2C:AB:8E:7D:73:CA:F4:E3:D8:7B:E6:08:8D:E9:3C:FD:57:04:B0:51:A6"}}},"request":{"raw":"OPTIONS /chat/chat-msg/unread-msg-list-v2?login_token=2dfb313f9973416248758b4c448585f5\u0026chat_user_id=a5ef914b39cdc01f67756a2b99781a1d\u0026direction_type=1\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651924\u0026_lt=2dfb313f9973416248758b4c448585f5\u0026_u=61ddbdc777c7b496af8e8d1c75858381\u0026_xma_=392765 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://binance-usd.com/\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 12:14:11 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9f4eb45ccbe7b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":31,"dns":5,"connect":5,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/index-2ee7b3a8.css","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/index-2ee7b3a8.css HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Sep 2025 08:42:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68d3af13-553\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kleX80CtMlCY2yYREWFVSR9frPGEgtZdwfG%2BhrpbrsAHA3CjsW%2FYdkKjP1a1lrVpaAVc7MufVo2lANFaApvl9bfUSDCOhTB4DMSop5EJRXtlQC68qXRL%2FzHFPo3ovxGfyOQ%3D\"}]}\r\ncf-ray: 9f4eb4508a8d5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1362)","md5":"0f5f6fda477235a06349008a000d81c8","sha1":"2431f7ff7dfeac6f2ec44afeb4cd3480abb25990","sha256":"2ee7b3a8a0e1b31b163b33129d9d82b368716adfaadc9f632b97c05fe1937a26","sha512":"e962a30cc904c107b5800bbac6606585b6d74c1d7f0d61eb032bae0a30a77c60d11f232e231bf943f53ee88fa5d971a540ea18881cf1f4855ad5a2e2b7c52f02","ssdeep":"","tlshash":"aa21c478da5090397e12fde5d7d705daf23ca5614c1beb997a18e16083c37f41a13382","first_seen":"2025-07-06T21:44:04.062809Z","last_seen":"2026-05-01T13:58:35.297605Z","times_seen":244,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/BaseUserTab-c449726b.css","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/BaseUserTab-c449726b.css HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sf2JoWgL4g6KwwTB8pQc63q3Lcv6QrEC0V7YnF%2FynoqfyJD%2BV7Fr%2BjtWTJeiQngsUvsyVJI%2BbnKj4wowVPL75m9I27K3aZ1XV6eoEt45XkRb2JWkXVxplH6a17kmUpycoUM%3D\"}]}\r\nlast-modified: Wed, 24 Sep 2025 08:42:59 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"68d3af13-67\"\r\ncf-ray: 9f4eb450aa945699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b8d7ddd09f6113fe70a8ce29ce0f4f9a","sha1":"e5e5284a913c5a08cb36b655cee62fab9ae2f736","sha256":"c449726b38d5164aa8a8d9c73e9c00f401e74c59b1bf2d6b974d15db8722372e","sha512":"b385a0a7b17f175fe07b11341303935f1327d46d8bc66073e545fa18a160d6e60dbe3e74b75e100ec6714b6ad09390305ae9d9bb2ca00a039a51913d6bf18320","ssdeep":"","tlshash":"5cb0924c1840b02a288161f80f5642e808493244ae028eb870243d5101c36f9207392a","first_seen":"2025-05-06T14:23:01.793345Z","last_seen":"2026-05-01T13:58:35.329158Z","times_seen":213,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/NavBar.vue_vue_type_style_index_0_lang-39e21835.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/NavBar.vue_vue_type_style_index_0_lang-39e21835.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-60fd\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U3qINRyqJAWRKwXOTXVgkT%2FJxF8%2FKUs6GfoAfcKnI4xu26n3PvgPTAOMtrp%2Bc%2B%2F7jH2wFwXEWIK8LK73s2LEEs4R%2BEs3S4s8Jv0qAN3S4ZtzU7u%2BVhuW%2ByrbqQG1QXk995U%3D\"}]}\r\ncf-ray: 9f4eb450ca995699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24829,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (24828)","md5":"2121a2fe8c2393d5b240dd2bb3c218a7","sha1":"72674b199c8749d3169b21835db06a4f8899b34f","sha256":"2b029e1d7f128d11d6c997a91795dd8667d9c5dcde551be06f59323c5b219ac1","sha512":"0b07dea1cf3879c3db7234f1316b14d61a73ed2e4da6713380fa3f3e68f6caf941f20eca2fd88fb3e2630b9c78140950e214aaa67e387613ba93b3e3103776ab","ssdeep":"384:/bB+piye6YLVu5KtxyXKBP3gC6vhX6KSaHnUw9u/4uj2:/EvewrR957+/J6","tlshash":"29b23140e525cb7ccab623398e866444b24c5fced149a995f1fd282b37dacf47118bac","first_seen":"2026-04-21T13:48:47.877894Z","last_seen":"2026-05-01T13:58:35.31093Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/BaseUserTab.vue_vue_type_style_index_0_lang-8bc70cd2.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-8bc70cd2.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RTJuS2gZpI4c2C%2Bo5%2FrBoOr%2FWr36jcoF%2FfbMfDD0Ha0suR7XG94RsGS3hvj83n5BiZxTNodKedpUWkns%2BHHbMzhkF7Iji6Py7Lj48ozN1WeDn76sgsTs42palRdSRIl0kXU%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-2d4\"\r\ncf-ray: 9f4eb4529ad15699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":724,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (723)","md5":"d6eb86ad0c578162c281f0a08991ee21","sha1":"1440b85b4a96b9ee3c4bd9863d6cc7e65c2ba632","sha256":"3ae188eeb355b75490634ccbd859afd086de44689f2e37bc718f57334e285053","sha512":"39f18ee43b8df8453791d8f56cd710e28d65c5700a341a9722c5ead15b63f07a0098a6c8213451d6e1954ff622c0f08fa33d2f2bb86caf841acfd71e07ed5351","ssdeep":"","tlshash":"510149dc58f9cbf9849306543e2a5050d0958f94db39cd4570ec1a32274b8b1b6ee37c","first_seen":"2026-04-21T13:48:47.880093Z","last_seen":"2026-05-01T13:58:35.32577Z","times_seen":6,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e71ebbddcb.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e71ebbddcb.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 87366\r\nlast-modified: Tue, 21 Apr 2026 06:52:43 GMT\r\npriority: u=4,i=?0\r\netag: \"69e71ebb-15546\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0z5IlbsKrfZVfsVXNMEZaXuyj4ADe8iT64l8xM4p0dEpFoAHONpvBZHIukqZ%2BMwjDdSDj9WBxpgJl4eZY%2FSVw2rkwdzx6NPPel5aVSCnrGVQZB4AoBiqTLeyyFy6uFhg1mUjKdUH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4534ad95699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87366,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x658, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"344eb527ddf724a33e3e353e3d4ef0d8","sha1":"02745938a053abb0348beec0dc248591cb563873","sha256":"0644f9b0b6a4b64e3343aac05dbf88b9efef35bcc56d60974d8dd420be5ca1a9","sha512":"a9af85c0e7eacf523b920571d42d61bdd6eedb09b49a6a83e3619a2b6df8657b570df22c70f38f04c14e74dbe27be86bf4ad764e628345a4009257de1f9f8e18","ssdeep":"1536:WOdIBn0iLII5uGRu3NsbyhY3pHCZ0x8spF+JZz3VZo+7ffKkNSsuG:WOda0iX583UD3g0x8c+7lZo+7fNNSbG","tlshash":"1b830233f34ed88d9cf8e488964e191de55b599d9f9bc850082895e290cad402bcdbb9","first_seen":"2026-04-28T02:33:41.863129Z","last_seen":"2026-05-01T13:58:35.330423Z","times_seen":5,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e7242fb4a2.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e7242fb4a2.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18978\r\nlast-modified: Tue, 21 Apr 2026 07:15:59 GMT\r\npriority: u=4,i=?0\r\netag: \"69e7242f-4a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hRcSyFKgq9rzTcMv41BRhH3FPFoGVWCtsM4JwqPEYlKHUzqVWh5uge70VCQeiji6uHdt6aw08tQgM%2BHlj7N0udIzUg%2BLxhNt3PdN8Hui0UsNo7NGffLOZ9qgnr4D1k07mr3hHrm3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4536ade5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4ff778660712b0683d34ae42bc1d5c","sha1":"05265637e3fcba97e8fecdce8450ccd54dd1b9ac","sha256":"92bfc815f955ee275b0f94ab0aa54742a068b5e2b227bfdc6b4cefa5c81997b6","sha512":"689ce8a04406e551fe1f6e5e2875db48827ff9d0a1a86a3d96d6f077a5b94b88071d38d9aa797ada8dff8bf9a4040db043a979539b7e8564e3f3d3f8a5575863","ssdeep":"384:A4Yibri2tmmqi55lB7Oppn3B03Pud/+FWdTU3j:A4hbrXtmmqo/OpVu3PuUI9Oj","tlshash":"ba82d0db1069f8bb8111ee36724bf49bf53c07d076ef81142785b98d8208da5f796638","first_seen":"2026-04-28T02:33:41.649603Z","last_seen":"2026-05-01T13:58:35.293415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e7254d1ec7.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e7254d1ec7.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18978\r\nlast-modified: Tue, 21 Apr 2026 07:20:45 GMT\r\npriority: u=4,i=?0\r\netag: \"69e7254d-4a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVbNrn75T3fUjRkLoGbzrhg%2BhwrHN%2BGwTeVjdj9%2FMTnsZ5aiEpngqG9%2Fntf4x2utF1hiXUSKOY2WFKLpjR2ulQKnckDZvuc3%2BrsEGOu5dBioSbK45rM3i8klGh7OaQHDvKqHF1uU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4537ae45699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4ff778660712b0683d34ae42bc1d5c","sha1":"05265637e3fcba97e8fecdce8450ccd54dd1b9ac","sha256":"92bfc815f955ee275b0f94ab0aa54742a068b5e2b227bfdc6b4cefa5c81997b6","sha512":"689ce8a04406e551fe1f6e5e2875db48827ff9d0a1a86a3d96d6f077a5b94b88071d38d9aa797ada8dff8bf9a4040db043a979539b7e8564e3f3d3f8a5575863","ssdeep":"384:A4Yibri2tmmqi55lB7Oppn3B03Pud/+FWdTU3j:A4hbrXtmmqo/OpVu3PuUI9Oj","tlshash":"ba82d0db1069f8bb8111ee36724bf49bf53c07d076ef81142785b98d8208da5f796638","first_seen":"2026-04-28T02:33:41.649603Z","last_seen":"2026-05-01T13:58:35.293415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-01T12:14:07.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 12:14:07 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oPq1vazdTxYOcZcuS3hKuw8TJpTmQbdNnwDIkuJJoXv8%2Fy0eaOX1yYa%2B%2Bo%2BXnV55C8WgQt6AheZcCCua8cYxZQV3VDg32ZSl3opi2AIdPCCerbTZd43MiDUpb8l%2F7l1B9M8%3D\"}]}\r\nage: 52\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9f4eb4406e6a5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152986,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (54279)","md5":"d67d6cfec9ce1b4f8efc71d7b9a4cdde","sha1":"463a6e3bb9e1a7a1bd06d12df64f54d81c2b502b","sha256":"b8a5f80bb51c610f1b8094e18381a560634d8506486ac82cca570acccb95f1f5","sha512":"c7fd25af29d18a5f1f34162c145d81eaf52f468976a81a2740e57a69bc24f0ecefedf89d17cefa67f935f8674b78a73897b1d78202a5e9e7275b78f8d9825010","ssdeep":"1536:imoOZI7RqsqLCJFApnPq4LBjJPu9WYZ9uGptLLWv2XyTO5Kwulq:lmuq","tlshash":"a4e309f6a3e8a1e8e80bd3b8e676a476312b30ff3f45c648719c5a64fb2105d854dd80","first_seen":"2026-04-21T13:48:47.839572Z","last_seen":"2026-05-01T13:58:35.306799Z","times_seen":6,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":23,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useArticle-5f65cd74.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/useArticle-5f65cd74.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPEdd2RlbwWbPcbNnkxrOk%2FRUpxSdEu0Jj%2F1Aw6k4O1fGkd%2BYL5fRAg56T94owqonKM6ycMbNhvMuZh9zYxVYr78gtkRjgFRdPrk3xyo5aClQbOtZMjGRXFBl8RPCg33nWY%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-268\"\r\ncf-ray: 9f4eb4510aa75699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":616,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (615)","md5":"bcb7f626fba16f4603d111c62b7d5ff6","sha1":"cb21b3cd026a4f356d449c5f63cfb162018927e0","sha256":"e34f0abad83baa33ea3cdabc39013b3c69a5ce419825c6d8948ce62083dfc61f","sha512":"a729e5b4b18bade9bc1a322a450d47db29f1d4e68b37b4784ed7209e37b615ef1bd258517105d2ff280e730145dd6eaea18e181339eb52b33f27d7d4d647eb03","ssdeep":"","tlshash":"5bf00274705c97b892767cb08879204c02712b00f90250c0270e9f5c19b66569271f4c","first_seen":"2026-04-28T02:33:41.662276Z","last_seen":"2026-05-01T13:58:35.300514Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e71eb2280d.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e71eb2280d.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 171606\r\nlast-modified: Tue, 21 Apr 2026 06:52:34 GMT\r\npriority: u=4,i=?0\r\netag: \"69e71eb2-29e56\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMTgg6JaEhKUY0jD4PQgKwxVLSKsa27T9nmQPAh8muhUrrFMGaaVTCgRC5n4pa2KynOZ6xJeXMWcX5gJnZKbENM0DblClPiqQlfRHzmZQnF2bw7iY7rKqg2QoOXjPxrWuNv87Ck1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4534ad85699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171606,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 915x485, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bedcbc017431a0a6c3855842375b663c","sha1":"6bbe2894904e5f131706eaed142de248bbaa6be9","sha256":"4314ac14ef985f5ed31e09de49288f1ac754255c016b135bd2e0cc75c55e80b7","sha512":"aff53fc5cf8c5b2f401b18530fb4042edb2fa0665324fee7f1a8d89d2e4953f76f9d1a30664e7daf1bb73471855e0ba826284fff74147faf25eda06b6fd6c2a6","ssdeep":"3072:qaTWx9WLtQ9UTdIKkQjCSriuTlEhSvQmlTe1XK/Mbg0npM7pAFD+GbEBnwnUYK45:nTWnEtHIK5uSriuGhs/Te1XzE0mAFrbP","tlshash":"25f312183fdebae5b1481382e3dc3981f2d219e143b69037d09917f7babe53869509d2","first_seen":"2026-04-28T02:33:41.792175Z","last_seen":"2026-05-01T13:58:35.329634Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/autoplay-0705b292.css","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/autoplay-0705b292.css HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Sep 2025 08:42:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68d3af13-193f\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2PzP3L0XQZQoY59UBr%2BBStbEhYH1Q%2FHvgDcFKGCf%2Fn%2BM%2Bkx8o%2FpudOvvMWw2GRYwSXJBYWhf%2FgjTESM82qwd7eMpWYWlmb8i%2F6Ha%2BYRGW%2BAok0U5D6UWlvFh81z00YcuQI%3D\"}]}\r\ncf-ray: 9f4eb4509a8f5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6463,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6462)","md5":"ad7569aeb1cba986c6ac4e67ede7ce3d","sha1":"a349c7cf87f2dd7986e8a559bcee04e373c4e819","sha256":"0705b292d9baebaf25bc13a82479079e34ceb79c72d8a0f2e629549e566ee963","sha512":"44050b92538f77d7b85ce174464f2a66a0734318ebf57bf09ae477343dac4a53ef60ec61498f20fe7fcd94624584cca649fff59d085ff02c749b0f23456272c1","ssdeep":"96:3B5mSJ+MbpDAKneQYX+vJToiL5dKSme+jeHfZDayEIuf/:fmUJbiKneCJTtdKSme+jeHu/","tlshash":"0ed1b730a3141c2362274f194b48e6f86ea484738fa38919f6856f2cdbfd8f5155eb92","first_seen":"2023-08-13T21:03:24Z","last_seen":"2026-05-01T13:58:35.300041Z","times_seen":135,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/api/public/index_info?d=1777637649513","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:09.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /api/public/index_info?d=1777637649513 HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-ctime: 1777637649513\r\nst-ttgn: 8b5e1c6f3304d69406567e4836815503\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:09 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n2e7EP0cYY9hWI8o3Uq%2FtBkOnPwUEayERs7Jhzhzzp2cGTT87pfLcw2%2BteOXhoSlUZhVUFnVr37ajfUB7Iy0Urdri4KCdrwkcXOJGbHpBvFqw9bqu9kG0oCc2GaA3bmFd8xSoonA\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb44f6a7e5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8024,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d065f3c9919092ece8adae2e0bca6fb9","sha1":"ef68b3e5e582d97ea07cf73c5c661204ef973dba","sha256":"9fb827e3a7cec4f9a1b5dde6fd774c6822eb2c926bf27e36f9815bc7085efef8","sha512":"c8d356306a8d7925fd17207dff2b8afc4aea968eae286a3af34b665a4eb9aa996b46f7b314d257eeb68a885b1bff7938df57f8fa900dda20c24b15fc7e8c7246","ssdeep":"192:IIYzIQ3z7zOV12FXMuT6wH93W7glmguVDJDVDla87:T+D7zq1YT9dmMg9F91wA","tlshash":"27f100e1727f4c0082f62ec1be8e3591a97df05b9ec4fb64da2ead7c45e4063426b811","first_seen":"2026-05-01T12:14:39.511495Z","last_seen":"2026-05-01T12:14:39.511495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-a148c833.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/BaseMainBtn.vue_vue_type_style_index_0_lang-a148c833.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2Mggdk7n1WERdKTrz8dTfrqSL%2FOHUAchJnYomnEizTQsHAD1q75NVohhkPFAHmTQVxOI37Vpf4SwzjqH1ErWkBWJWwTTO4hDvgh4jZV%2B5OftGMxaVYnEBrndl5SgQcjITk%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-22c\"\r\ncf-ray: 9f4eb4527ac25699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (555)","md5":"4f2f5af9f445cbb2b3625edede115a8e","sha1":"e0beb65b419b888fa1ee4956b2837b8aa426c408","sha256":"35d0f9305a050a0f739a0f3684a883702fb5b621a83a0161a676cca223092a40","sha512":"a7d598640e1786258e4d1b948e40dc558580c358eca7de068ad7383969483d81f3fbedac5c16d53479a028ba3fa4fe27d47fdd93461091cba01fe44c96c2f883","ssdeep":"","tlshash":"f9f075096c06c5bc2c82050d2a8520109104377fe32464fca6df213ca79f4f9783932c","first_seen":"2026-04-21T13:48:47.860855Z","last_seen":"2026-05-01T13:58:35.294277Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/product-e391d1b8.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/product-e391d1b8.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NPEywmphDRt%2FKnjF9l3esN2DnowAIqxDvb5FPhfkgFEhKhl1YJduh76Yf5DalFE4J9lhOEYuYv%2FNdeOejjukZIil1MA%2FcyRiCfoDRiIDcgfIuuR%2Bd8aqX%2FMTZSUGz1AjF%2BE%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-2ad\"\r\ncf-ray: 9f4eb4529ace5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (684)","md5":"ec6ed510d9ea2dd4b8b4d136342c28d5","sha1":"ba36ae6418478311ef7e6b65ee59016b7a9e31b0","sha256":"95829cab8b253dca9a69c5a86c886b7de891418cb27beee6bd91d57a6f163946","sha512":"c162b5ec9821e5820489177cd4b0aa90275508da66f4f146e0ddaba1ef8fc28c4e2b737ea8c3eb3a36ed0a70b8a8b70237028f8ad840217ed1ac4c7f091d3465","ssdeep":"","tlshash":"9c012b4e6c6ff3c94557e8b0a120ce058e19a960fa4d47f87f547b1176c218a6199b34","first_seen":"2026-04-28T02:33:41.696831Z","last_seen":"2026-05-01T13:58:35.287534Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/plugin-install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/plugin-install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Thu, 30 Apr 2026 13:39:03 GMT\r\nx-oss-server-time: 3\r\ncontent-encoding: gzip\r\nx-oss-request-id: 69F35B77C05EDB3139E3D7E8\r\nlast-modified: Tue, 28 Apr 2026 12:27:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7676787905678178183\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: mHcqyPSMmcWZPsyiVxX5qg==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0ca3a24436a7d86916b35130b21285a8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: r8G6tYdqrqrHO6VRZn12zAWJG98gqEAzZhQEYfN4fi_edSu6w9Uy9g==\r\nage: 81306\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":20819,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20819), with no line terminators","md5":"98772ac8f48c99c5993ecca25715f9aa","sha1":"941de7b3af4dd94c3b73e3baee851f1afe8dc292","sha256":"e0f936380b80a3f0f27afe4274efbcb4dbc7fe67ed3e0325f399721abd41bf9d","sha512":"9e94c55015d02953ad49bc72b40bb19274af84e122f68dbccc3e58ea7c05b6d94991d0db3aa497178a3647dee6d5c32d3c62e8b37b9ffbcdd46359e063663b1b","ssdeep":"384:2Pyg/NXbASoSALbGf4NwNiB0W9jyyxRyL1hKGadeBTKSwQU:myg/ia4NQiGWwnLadeBTGl","tlshash":"ed921a4874297c7842af5a3325fea214207f1b852931d4a0f26cdb786b78d875177ebc","first_seen":"2026-04-28T13:21:41.182751Z","last_seen":"2026-05-01T13:58:35.298643Z","times_seen":45,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useFriendsCircle-c0118cfa.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/useFriendsCircle-c0118cfa.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-ab0\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O5oCClCWbtAqi5WptEhVan3ycDUyzPgGoYTDkyV2X1tvpIor7PoqCYadbHvADTHR5Bt6X%2F82wZS%2FfROeiL79RgvO%2BzKhhD5u%2FKlMWnA47gM1wC5OdHRUFq4cErTdbyEZQEY%3D\"}]}\r\ncf-ray: 9f4eb4510aa85699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2736,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2735)","md5":"4e48229fe68a6127e23d0ba0342d8fd1","sha1":"cf235710c7e6a1320a45fe883216fa274ee6010d","sha256":"9a2aefd0706fd66954ca944b49bb2cdd5ca6f45fd6d3fdf55a04a819055a3a66","sha512":"e888ef446ab622f011333eb14c0a3a70cec6913d92450bb63ce6d3e16d78fe6a2465b1aa2b6a4c148d7a66ae4fe38bdb912cbb79ebf741d7c1f6c05fe7afa5ee","ssdeep":"","tlshash":"4351b67236b226ead3b330b9e13650159aa92f943d16d1d1b11d0f058a7cc12d9bff28","first_seen":"2026-04-28T02:33:41.665972Z","last_seen":"2026-05-01T13:58:35.315324Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/TaskList.vue_vue_type_script_setup_true_lang-d7bf96dd.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/TaskList.vue_vue_type_script_setup_true_lang-d7bf96dd.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJcmiArGpmTHLmck6bgiRnX5JIQCqTceBbcbFBUfZAc4NZJyL77lzP4Rh%2B%2FLMCFPINbQfkhvlGUoy%2FMQdvuCnMfoYSCZuH%2BB1vEdEiv68xqV0LyXQIoAXu7kg39L81VDjnc%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-222\"\r\ncf-ray: 9f4eb4526abf5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":546,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (545)","md5":"c25c28b0af75c92de44136f52b589bb3","sha1":"d2bbb08634f736e7a5dd609196be2fdbe1f5094e","sha256":"676cf90f44081da854b2d63f50f6108f987b425af8aa4bea38588868eca396c3","sha512":"d48d014e4a2261f09af16f68cde038c8e5030211df075873b7ba2cf5cae31a5a048e0a2d023bd876dbe203bb1c4c2e75cba4cb9c207e78edffb675e3b6128189","ssdeep":"","tlshash":"b4f0c08e7d0d56b383598db4b37a446260940357632c91d4f84e0877d3114a4a87fedb","first_seen":"2026-04-28T02:33:41.84013Z","last_seen":"2026-05-01T13:58:35.304464Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets-cdn.salesmartly.com/prod/project/gw6qsf/d4w/integration/plugin/image/20260421/1776784902957/image_1776784902957_7572a4cd4b7b7423b1bd63ff2d5.jpg?x-oss-process=image/resize,m_fill,h_120,w_120","fqdn":"assets-cdn.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"108.157.214.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /prod/project/gw6qsf/d4w/integration/plugin/image/20260421/1776784902957/image_1776784902957_7572a4cd4b7b7423b1bd63ff2d5.jpg?x-oss-process=image/resize,m_fill,h_120,w_120 HTTP/1.1\r\nHost: assets-cdn.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=61ddbdc777c7b496af8e8d1c75858381\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 3735\r\nserver: AliyunOSS\r\ndate: Mon, 27 Apr 2026 04:19:34 GMT\r\nx-oss-server-time: 31\r\nx-oss-request-id: 69EEE3D6A05E363230D2622A\r\netag: \"EF06CA50047FBC11D2DC850336F8ED76\"\r\nlast-modified: Tue, 21 Apr 2026 15:21:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nx-oss-hash-crc64ecma: 1444374274374314519\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 419f3eb3d74bedebbef6fc91b3f54a36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: p-vUmQnC6XMIZ4azFCpntGFFM7zhz5FImTvO9Sb0okeSKJspq6fJMQ==\r\nage: 374077\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3735,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x120, components 3","md5":"8b668f6b8fe4afc4d60b8a6c6a921591","sha1":"7d5ce982dee198edcb6667a5801f56a532358d38","sha256":"fa26da5a6fa034458fb4cdd567bc5b1239129d7f11e8066f66b189e3c16880e1","sha512":"75f31a0940a5f9b14efb9d17592620ab6f39748b1954166facb908d564ca1abed4102b5119730d30e6530d46cde16fbe938ae88b8e418440c2dee85d9163568f","ssdeep":"","tlshash":"6e716d520b239814da3de6fb86763fab14001e4af9619a8713b28d3270f0df53973348","first_seen":"2026-02-24T15:54:43.207374Z","last_seen":"2026-05-01T13:58:35.318464Z","times_seen":6,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":68,"dns":42,"connect":8,"send":0,"wait":15,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/api/user/app_info?d=1777637648975","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:08.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"OPTIONS /api/user/app_info?d=1777637648975 HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://binance-usd.com/\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:09 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aHTptXbfN9wc6SAWPGctaVGyqOjffZ2%2FqVuuMfJBkDpmNfgy0ACqR06RRT%2FOEzvSlHv1FVuhU%2BSj9P63q9YNHrc3TrkPnJ7M%2FFm9o2OD%2F2AotexcP7pmrTMOdIpxL9%2BOLmLxDLOG\"}]}\r\ncf-ray: 9f4eb44a2a435699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_392765_404284_1752474192.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:09.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/project_392765_404284_1752474192.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Thu, 30 Apr 2026 13:45:53 GMT\r\nx-oss-server-time: 13\r\ncontent-encoding: gzip\r\nx-oss-request-id: 69F35D11E702E2393932C7B1\r\nlast-modified: Mon, 14 Jul 2025 06:23:12 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2570771719880970908\r\nx-oss-storage-class: Standard\r\ncontent-md5: 2Rk4ygLZuQXqH7UoYJYcmA==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0ca3a24436a7d86916b35130b21285a8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: VsnzCH52Zj4j5gQIRThx0pQ9NSIqBnQ4PodfstY2VLNy0B8boDkGjw==\r\nage: 80897\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1183,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d91938ca02d9b905ea1fb52860961c98","sha1":"5f56c8d7ebb28ce695a9f05da9fc1c0abb008427","sha256":"4c9f8555aeb237e769a3fe131214ea56c761b34365a10ba6c838a0df35c3ce40","sha512":"1f04a4de5a4e1cebea8b45bd9954de5274d944fa5d7590486b9233a0ac9a530992cac1c9f43faab93bf3bbe6f3d0dda9d7e20385b842fd69d6c9280eacc6a04e","ssdeep":"","tlshash":"6721c9471c63a4797ad6727b4b3f88ad3998a2432004cc10bc4dd4681fd09e20a9eee4","first_seen":"2026-04-28T02:33:41.757132Z","last_seen":"2026-05-01T13:58:35.324257Z","times_seen":5,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":27,"dns":1,"connect":8,"send":0,"wait":9,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/danche-5acd014e.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/danche-5acd014e.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zkzvk1EUkgWUTLyBBDochx2jZgo0KXdHZjCGHyJpKlITNn4QutouEgow5KZxMGyzthvOmshyRcQ%2BVZ%2F044AmxbLI3L2jHfyfDqrK%2BWuFZ4mREfuRxItfPd0c962RTmqbCF0%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-3d4\"\r\ncf-ray: 9f4eb450faa25699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":980,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (979)","md5":"e76485cf82c36e5eda8afffd1433cd4c","sha1":"6429e127f292e66ff78079815eb972fb7a8ddbcd","sha256":"dcf650a5c619bd8786e7f50f6f7a7b003b549e25e97dccde0da212d4d1894498","sha512":"2ebbf8a67261fa5e74b8ee38b3bda3a1a02be115e17cbd7364fd6b5049027ce334c4388214e67b46423e74b212ccddbcfc63dceca1f117dc9a1acae9092a207d","ssdeep":"","tlshash":"7311106f780376f0fab01c602a66805322144b8bcb2fe2c5b2bd0e41a796d307b25635","first_seen":"2026-04-28T02:33:41.736306Z","last_seen":"2026-05-01T13:58:35.298112Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useVip-07a76e90.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/useVip-07a76e90.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-baa\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5DSGmfYGNgC55dNRtP1WKYGt3OsFIJn6t9libQ%2BQBmH7bpMS9rZ1iEkTY77FeNQQQxBkdh6DjKa5mvQpM9O5WvhWnBYJUC8wG8FCVUO0A%2BsAwjBFXFUNBFugXBhCunGtVx4%3D\"}]}\r\ncf-ray: 9f4eb4511aad5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2986,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2985)","md5":"69c7d9822776b18d5dedf5d97de57b3e","sha1":"ac57d50ffa791583f71790eb94c3fcd256f604b2","sha256":"9a5404968501785f6cd7fd3d49ebef1d589544ba83176cf073b191d846642c12","sha512":"6fa2718d899265d3a7e6fe65d0401fb95c8fa65ebe0c98a32cba3d85b3943522eafe096f483f92d30aff1fd6c4abf566acecd4e07f968a4cb8ecca720275c13e","ssdeep":"","tlshash":"6e5152abf178097a0bf50878a8f9138711341304f851a5ea52971e419f6bd118ffaf0a","first_seen":"2026-04-28T02:33:41.765708Z","last_seen":"2026-05-01T13:58:35.311814Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/css/plugin.ca8811dc.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/css/plugin.ca8811dc.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Thu, 30 Apr 2026 13:39:03 GMT\r\nx-oss-server-time: 5\r\ncontent-encoding: gzip\r\nx-oss-request-id: 69F35B77EE88453834508391\r\nlast-modified: Tue, 28 Apr 2026 12:27:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4711444634510545221\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: GJkBkDDNMX5T+a6ZYreZHQ==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0ca3a24436a7d86916b35130b21285a8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: ymJBnD4ipoFoRE6PSvMxwczjx_Rra8oqz2BaqSJLX39EyhShYjEy6w==\r\nage: 81307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":77948,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1899019030cd317e53f9ae9962b7991d","sha1":"b9d94d577b4c079d5fa4823f82896df59f4d9b5e","sha256":"2d16333363ea5a097558bc8675e8fd989e71e6144b89c0ff537bfb5ca3a087b9","sha512":"152a11565d2e8f381451c197d63daadc1cc14baa9c2113361549949b0a2db1b1c5ad535a152b80eea4728caa8dae9ee32b26e15d42886dae45df70b97f9506d5","ssdeep":"1536:B+1IfcryTXKrMV4wU3k1rz0JUjMBwrjlvOb/E0/qPxE7aWSlsgTu1dQq5qsLxHig:g1Ifc6KYVh0JUjMBwrj6qxE7aWSlsgTg","tlshash":"5a73a832ca15312da177e125f5c0f9d930b5c207fa230aadfda47939c2f298527b668d","first_seen":"2025-11-10T12:55:36.307776Z","last_seen":"2026-05-01T13:58:35.30819Z","times_seen":1219,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/vendor1_b8775aab.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/vendor1_b8775aab.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Thu, 30 Apr 2026 13:39:03 GMT\r\nx-oss-server-time: 9\r\ncontent-encoding: gzip\r\nx-oss-request-id: 69F35B7740058439374D8A0A\r\nlast-modified: Tue, 28 Apr 2026 12:27:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15305004930386263030\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: TdEL+eOlXQT7AtB2+NiI/Q==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0ca3a24436a7d86916b35130b21285a8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: qnk8CJgowgyD27mLtsrQh4jRRx_d_jPTIA8QlJD3NGK-sx2KMU_b-A==\r\nage: 81307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":225000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49155)","md5":"4dd10bf9e3a55d04fb02d076f8d888fd","sha1":"73fe2ade639561e0fbee753a10ab3a8f64457ba6","sha256":"9b5cc937de300ae7ed821b3c25405086cd9fc0c25be5f6afc2213b06d1981408","sha512":"768877b7f6860408251dfc60ac57ed4499ac9ff259f506f98020a848b1f8dd67378758074406603c95d98bfa621d4d451d9a941f9932c2bc9ecfe1eb9e69f9ba","ssdeep":"3072:hUj1XOH0ipFe9OY0ceCK7KtWO77yzk83UzlgE6CjnWO:2kHbDCK7gf7n85NO","tlshash":"b22408c8b295b06143a770b4407f550bf13ab915680ec5a4f226e8da7cbc98e907bf7d","first_seen":"2025-05-10T22:57:10.916725Z","last_seen":"2026-05-01T13:58:35.320861Z","times_seen":2062,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/plugin.cbd06084.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/plugin.cbd06084.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Thu, 30 Apr 2026 13:39:04 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 69F35B78A846BB333960BA06\r\nlast-modified: Tue, 28 Apr 2026 12:27:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11013123830953719562\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: xFkk1MYpbEkzJ+FrYe2pdA==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0ca3a24436a7d86916b35130b21285a8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: XX6mfWB24pppi_J-Y9Na3Jfm84_b7wvbpQRg9HBsEHcfwkXgJhwzGg==\r\nage: 81307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":380050,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62398), with no line terminators","md5":"c45924d4c6296c493327e16b61eda974","sha1":"3ef2ffba88dadb6b3c5cfdc92eda4aa571d405e0","sha256":"ecc27b45842422f12dcfcf2d605b5d62ef20982f6b12261b2e51b3c7fa9b4d1c","sha512":"78b5173d501b71b6f8c8cc99a2b2906e332e7e499d7df68b10d3e2f6d67dad500f418fd4817cc87903b41c096a35cc8a95a4f0323da7e1655350ecd592303396","ssdeep":"6144:G0bg30bPKQQDLVQbOMZzhDetWx9a+gcmLTDrqGKAbCPfvaHcqiQUd+wa8Ar4gWDE:5bPKQQDLVQbRZzhDbMDrqGKAbCPaHcqn","tlshash":"2f843a49f5c9f86b07b361b1602f6009b3ba1b48e409d8e0fe75d6e91ab4d496323f1d","first_seen":"2026-04-28T13:21:41.188714Z","last_seen":"2026-05-01T13:58:35.290707Z","times_seen":41,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets-cdn.salesmartly.com/prod/project/gw6qsf/d4w/integration/plugin/image/20260421/1776784920580/image_1776784920580_4e7549681dc568f1b4a5c6f5384.jpg","fqdn":"assets-cdn.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"108.157.214.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /prod/project/gw6qsf/d4w/integration/plugin/image/20260421/1776784920580/image_1776784920580_4e7549681dc568f1b4a5c6f5384.jpg HTTP/1.1\r\nHost: assets-cdn.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=61ddbdc777c7b496af8e8d1c75858381\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 74848\r\nserver: AliyunOSS\r\ndate: Mon, 27 Apr 2026 04:19:36 GMT\r\nx-oss-server-time: 64\r\nx-oss-request-id: 69EEE3D87594F933367525B3\r\naccept-ranges: bytes\r\netag: \"EF06CA50047FBC11D2DC850336F8ED76\"\r\nlast-modified: Tue, 21 Apr 2026 15:22:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6871224543162321910\r\nx-oss-storage-class: Standard\r\ncontent-md5: 7wbKUAR/vBHS3IUDNvjtdg==\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 419f3eb3d74bedebbef6fc91b3f54a36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: sYMPp26y8vQYRYhb8dMaxR65kC0eju0ZiUKkrdl7kJPVsWLfDvDQDQ==\r\nage: 374075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":74848,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 744x662, components 3","md5":"ef06ca50047fbc11d2dc850336f8ed76","sha1":"2451649b39a735dc18c087943c56092ea4965345","sha256":"73375e66bb14d235a4a19320744834f2847dfd6c26e49a21e1c1b83adbb3c7f6","sha512":"fc6e4013564bc0a726157fb467106249d41ab7ffafad24ef3f6909b82cae0aaee89f1df86e21f0bdd37eca134f1581315260ab1e79f48291fa54d81c65064ad9","ssdeep":"1536:qNWVkEELIFAd+BnzokcqP2AO3PfBVocgc4p/12EetURbp4Zm3W3Hr55:aWr9Fu6zo5o2AIfjo24p/12Dek95","tlshash":"f9731262cbdc8b51f19a867f84e42ccf7317e9f65982b5a3b11cdae0492034c4e7d992","first_seen":"2026-04-28T02:33:41.725135Z","last_seen":"2026-05-01T13:58:35.326591Z","times_seen":4,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":41,"dns":12,"connect":8,"send":0,"wait":12,"receive":18,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"13.249.8.42","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/marked/v14.1.2/marked.min.js HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Fri, 17 Apr 2026 02:30:39 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 20 Sep 2024 06:38:39 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: JFBntxsrfZ64VoXBE8CHtNjr4.xFrBV4\r\ncontent-encoding: gzip\r\netag: W/\"4726c8d370952011c5137ee8e13eb6bb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d27d3f4230954794eccdc551e04ec846.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: EsNM5I8kQqe4vDvX3HNDKmWe5W9Vwwo05kXQCo49wzReUFLYbFzyDQ==\r\nage: 1244613\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":36489,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36340)","md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-05-01T13:58:35.317297Z","times_seen":1966,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=76caecda6481992514de706855722857\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651186\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 12:46:38 GMT","end":"Sun, 14 Jun 2026 13:46:34 GMT"},"fingerprint":{"sha1":"4C:14:A3:50:BC:B3:C2:AC:E9:F6:88:D4:36:B2:E6:AE:E0:D4:64:D3","sha256":"C9:AF:D2:80:FE:11:04:07:0D:92:35:3A:19:79:9F:31:89:4A:2E:34:36:0F:DC:BD:33:1A:A8:E2:82:15:41:42"}}},"request":{"raw":"POST /client/station/log?plugin_sign=76caecda6481992514de706855722857\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651186\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 351\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":351,"data":"data=0qHafQ8hMhHKtTc8f5KWB9HEPQu%2Fs9DwtNIvBQIWPCFABqypyQcWPnuEPhyiyQHEPQu%2Fs9DwtNIvBQIWPCypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6hBdHqrnshMhyhBdHpsnmGyAKhrnkwXXlhBdH8PTXG1nmb1nohMhHG0ec5rnRhBdH%2BsScEP9khMhH8sntVXQVVtqypyGcW19X%2FyAKhyh8htnVvyAKhyG4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 12:14:11 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nset-cookie: ss_uid=61ddbdc777c7b496af8e8d1c75858381; expires=Sat, 01-May-2027 12:14:11 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4eb457fcbc56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"41a9ed6ac9ccd6bc0c1afc92507e9f5e","sha1":"c10a69ac325b842f2bfdafa267a7a63de09ddd85","sha256":"cf12f496000db5f05e99b6728462606915119a19c62e78e4d44cdddc2ae9b133","sha512":"24a914c56371aa87ac7469e0d97b9fcdf197101b84bea571ee33a7a6c4c257fbbb18508636d263063007826f304782aab74a338c7f12335d4a5f447f6ac21a53","ssdeep":"","tlshash":"28b012222029132b0e04d40e980626645070500049104709c8fc8a64935d8467142dd0","first_seen":"2026-05-01T12:14:39.539628Z","last_seen":"2026-05-01T12:14:39.539628Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e71882b0be.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:09.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e71882b0be.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18978\r\nlast-modified: Tue, 21 Apr 2026 06:26:10 GMT\r\npriority: u=6,i=?0\r\netag: \"69e71882-4a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9idx%2B96UMNsZHASWmMM4CWPKYWzo3HxPXwp29%2BO3ohOt3orB%2FITtRg2U5Wgn2N7mAQwb0V4jPm0tSc7uzZfYiVXvrdATQ2dxGJniXKj5z1gdKqvS%2FmO7MIgHTl5P161KEEaXbQl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4500a835699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4ff778660712b0683d34ae42bc1d5c","sha1":"05265637e3fcba97e8fecdce8450ccd54dd1b9ac","sha256":"92bfc815f955ee275b0f94ab0aa54742a068b5e2b227bfdc6b4cefa5c81997b6","sha512":"689ce8a04406e551fe1f6e5e2875db48827ff9d0a1a86a3d96d6f077a5b94b88071d38d9aa797ada8dff8bf9a4040db043a979539b7e8564e3f3d3f8a5575863","ssdeep":"384:A4Yibri2tmmqi55lB7Oppn3B03Pud/+FWdTU3j:A4hbrXtmmqo/OpVu3PuUI9Oj","tlshash":"ba82d0db1069f8bb8111ee36724bf49bf53c07d076ef81142785b98d8208da5f796638","first_seen":"2026-04-28T02:33:41.649603Z","last_seen":"2026-05-01T13:58:35.293415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e72537c899.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e72537c899.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18978\r\nlast-modified: Tue, 21 Apr 2026 07:20:23 GMT\r\npriority: u=4,i=?0\r\netag: \"69e72537-4a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KAXKDoTSa06qki26Hp338u7fbUByPdhdlLNfpkpwdPrIIqBjiZquscmERS0gFIYeaAydq2AtlDb2wN5X32BUjydUFKkrEKcP%2BJDfdUjEF5lBOKF9rU17d9O6k8wTOPHE4%2B0p%2F%2FXX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4537ae35699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4ff778660712b0683d34ae42bc1d5c","sha1":"05265637e3fcba97e8fecdce8450ccd54dd1b9ac","sha256":"92bfc815f955ee275b0f94ab0aa54742a068b5e2b227bfdc6b4cefa5c81997b6","sha512":"689ce8a04406e551fe1f6e5e2875db48827ff9d0a1a86a3d96d6f077a5b94b88071d38d9aa797ada8dff8bf9a4040db043a979539b7e8564e3f3d3f8a5575863","ssdeep":"384:A4Yibri2tmmqi55lB7Oppn3B03Pud/+FWdTU3j:A4hbrXtmmqo/OpVu3PuUI9Oj","tlshash":"ba82d0db1069f8bb8111ee36724bf49bf53c07d076ef81142785b98d8208da5f796638","first_seen":"2026-04-28T02:33:41.649603Z","last_seen":"2026-05-01T13:58:35.293415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e725b38d0d.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e725b38d0d.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18978\r\nlast-modified: Tue, 21 Apr 2026 07:22:27 GMT\r\npriority: u=4,i=?0\r\netag: \"69e725b3-4a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2BtXsh3wk04AFub8%2BbpXnM7z2cAIl9hdhBwSXxUesAehMJHLBshF9fmq1Iivmmtu8QWdziB0OqoixeZFftGSITJB4VX7cVv58p3odEdHyCf5UUSZdKL3%2BRI55YL919mv0WYSQ7e1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4537ae55699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4ff778660712b0683d34ae42bc1d5c","sha1":"05265637e3fcba97e8fecdce8450ccd54dd1b9ac","sha256":"92bfc815f955ee275b0f94ab0aa54742a068b5e2b227bfdc6b4cefa5c81997b6","sha512":"689ce8a04406e551fe1f6e5e2875db48827ff9d0a1a86a3d96d6f077a5b94b88071d38d9aa797ada8dff8bf9a4040db043a979539b7e8564e3f3d3f8a5575863","ssdeep":"384:A4Yibri2tmmqi55lB7Oppn3B03Pud/+FWdTU3j:A4hbrXtmmqo/OpVu3PuUI9Oj","tlshash":"ba82d0db1069f8bb8111ee36724bf49bf53c07d076ef81142785b98d8208da5f796638","first_seen":"2026-04-28T02:33:41.649603Z","last_seen":"2026-05-01T13:58:35.293415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e73c6450be.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e73c6450be.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 72226\r\nlast-modified: Tue, 21 Apr 2026 08:59:16 GMT\r\npriority: u=4,i=?0\r\netag: \"69e73c64-11a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csu%2B0KwUNZTlpnucrEmgAt3m%2F%2BMRLVmB3vI9jt1UnSB0Zw0OBGsL3hhol3Bb%2BJd9OhUKT5BemjFNIslj3762RqKW19XDaqYKKdf4OP2NEAJb2Ztz5C5lhN3XwTk%2Bii704KR7bMHe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4537aea5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x824, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"df2962aa5137c9056bc50b3239910412","sha1":"14a8743a1cf7e8c7b011bfe9b79209167ccb0f10","sha256":"2dfb3697abd02accc34bfcc23ebf9681153aea9620fc3aa17ad8d90b3aedd3e5","sha512":"13a4f3419415e80c92093c2612e0d36fd86576647033a4494fb930ca02e349d851cff0d15ca081432bf29a8594511362bba9482323f22f91865907629b1f6f9e","ssdeep":"1536:P4FYWVMwmaMGy7leADeCohDPQWuWqJrbCeqhuGv6oSDYn9o2T9:P4YWVPwGcleyhyjspGfIEn99T","tlshash":"8e6302a3f5017c7f806e0ab1080bf5384667fb6244d639cdc14276da77b1aab76349b8","first_seen":"2026-04-28T02:33:41.897484Z","last_seen":"2026-05-01T13:58:35.308768Z","times_seen":5,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/InvestCard-828e3461.css","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/InvestCard-828e3461.css HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Oct 2025 11:24:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68f2275d-22bd\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vXTKiVnwh5lFE5xvlyBNkopn8pGuvgzouGDb42p%2BEd4pKiU3hBTRtENIHbYEOswsZ64%2B84yP8dWYM8MYElgPVKikrZ4MhOgQgS3gIdTe3Bq3T8p3zbOdm%2BBODoqqtyL3w5E%3D\"}]}\r\ncf-ray: 9f4eb450aa935699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8893,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8892)","md5":"3a9b48a672ea73ea9aac1ea9ea701d61","sha1":"33c90dc4f88d06bd792ca86b4d6605be584a7276","sha256":"828e34611528ee07351e526d20d1c84e767287f026d42832329c8adb7831352b","sha512":"28312132ce8e7f322c47c661eb4154dae83192e6fdeed91cb0aa310ce764a87f7410a4009c242494c2a80013ec8b8edcb645c956f31f9e54450d485d4f6593ce","ssdeep":"96:hfTJMVPLGgsHq5SlLfoloYigRpYPLGRg9pTw7jgLmcKkT16WbActkY0ANKB:NwLlsHiSlLfol8/L8g9p87jgLmc9xS","tlshash":"ba0242f3e185231bb427e46a298d229d6c35b603d41397df66467231cecf9fb2963109","first_seen":"2025-10-11T14:37:51.684973Z","last_seen":"2026-05-01T13:58:35.309853Z","times_seen":95,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/tabbar-9655b8a4.css","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/tabbar-9655b8a4.css HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-b0e0\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dvlDBLyupbP3KmFBEBSdqMk6z%2F102Dk0QekZdivUGm8pU%2BCEmsNvvaFntoyqvlofrIhKpPwbq2NhwzOriRwTv7rkR9yTcs6oKVAJkz%2BxzF8LXQpwhTlo3jeCg0UEEwZlfJc%3D\"}]}\r\ncf-ray: 9f4eb4508a8c5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45280,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45279)","md5":"d4f9391bc7c84fb7f95aa29b25907a44","sha1":"f2c225f95d07b3724306b3772f0f0eeef289d157","sha256":"9655b8a4a0f6e2780546a178d8b74cd918b08ec783be56203d90a6ee69323365","sha512":"5c2f1d7d13ec8c0a45cb69fca0c151ce220ca20f574e91abf3ae9b95d2e01d85f9f753c6f0359b12c9289b64f8f882325c90f3cc2534e106a7075eb791cfa883","ssdeep":"384:/5GMjRchqm9KGjqRstWi1CYJHfkH/Q/NV:/ZjRchqm9KGj6sMICoHfkH/Q/P","tlshash":"60132394125c633ddb6bf13364eb45ca1910f213c527754abb42b7218afba932136fca","first_seen":"2026-04-15T23:06:55.590215Z","last_seen":"2026-05-01T13:58:35.325275Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/Task-635f1657.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/Task-635f1657.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-403b\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwMim1s6mRcdnHsEgiTDJpRdX%2FAZwxazbOJW6XaFmUZvxGccICXu8bC2%2BwTHAVaQAgB7ruKo%2FmFJCCsQaK8xRsdM0i%2BSQJ8gTZuKmuqccxtqum5ON%2FTRcNshqaXvxxBqQaM%3D\"}]}\r\ncf-ray: 9f4eb450faa05699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16443,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16442)","md5":"8e3ef7234d5071e2259af49bf608da2b","sha1":"8a81f409dea65bbe8ff7fe89bfbe3d7ca24d8e33","sha256":"e952751d027d1a734a75df5b2bd4077383faa158064f7c11c91cb7b8f596c5d4","sha512":"242de3c701ea060ef33b637f7777cb173e2f6a0dfcaf2376a93381725917ac115bff28b21af5f2245ea03b4fb7afa3801d7847c85839e9239fb719f93995f793","ssdeep":"384:OUJN/R4/oGo+We+UVJa5+Uptl0Y+UK1jN+U7hL++Uz:OMN2oGo+We+UVJa5+Uptl0Y+UK1jN+Us","tlshash":"9672ed06e807e2acf1f6b48465dc581462f42edbd228c407b5f8653623c69f0a79ef79","first_seen":"2026-04-28T02:33:41.889281Z","last_seen":"2026-05-01T13:58:35.296168Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/InvestMoneyCard-04ef78a5.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/InvestMoneyCard-04ef78a5.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-29bc\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7KGEN72g%2Fv9dJdCEoXeL%2FfOkZwOLLZ6MhlPG04QXdy9%2BaHArHw4J0USHQe2u3TQa9eI0jUdS5Wmo35nt4SHZEFzYX83DzhwInh3SqtfnH%2BveLnYjlJvEx4K9dhMby7DEiHY%3D\"}]}\r\ncf-ray: 9f4eb4529acf5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10684,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10677)","md5":"ba0230a1fc9f5eb721f37d7a837ae383","sha1":"d52a80d1beccb08ab79cf32c16fc2ae0f886aa47","sha256":"703a3eb658a3e5fd36fd29ed8fe326bffe796bc426904c19b3466ed7b1030c14","sha512":"ec90b503358763f376f1b77c6cea3b978e9d38ee3aa9fee656030cdd66af14095cef4d6cef8193ea9e245abb3ee55d07c5e5266acb0b4f1e0824c5273dc341f3","ssdeep":"192:boT+z7/ogqnIkBkDhf123wuCAaMoaGjgg7:bo8SZsf1BuCAaMoatq","tlshash":"d922db4076274f38eab32825b4ed5001b31c2fc6c482a552a0fd67825fcbd76aa9d76c","first_seen":"2026-04-28T02:33:41.678664Z","last_seen":"2026-05-01T13:58:35.288037Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/favicon.ico","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:09.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:09 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIVD8qZElYpQcqYCegSceTzMnGlAXKCQfh%2BOzvWprfH3%2FUQCZ71KHXBR0mzfSdl3kcs4Dkum4Yxsb1aswvgVpwKLLbDjCl7rUC0k9aKkyZAihOypv8FOhkgkDMpRIxYVKLE%3D\"}]}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nage: 52\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb44afa495699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-05-01T15:32:04.001588Z","times_seen":258918,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/InvestMoneyCard-04ef78a5.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/InvestMoneyCard-04ef78a5.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-29bc\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=reTmBapslLTLaW07JzdHBFj0xwQEctjYq4pqBGLiB8LKqdSrJkmMYoV%2B5cE4ugPupJncw4UpNoLQSohU8BholtDpmjzGjNIgvsyVjOB0VJOlZsA9zP%2FzhmmBDbalWf9HmlM%3D\"}]}\r\ncf-ray: 9f4eb4511aac5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10684,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10677)","md5":"ba0230a1fc9f5eb721f37d7a837ae383","sha1":"d52a80d1beccb08ab79cf32c16fc2ae0f886aa47","sha256":"703a3eb658a3e5fd36fd29ed8fe326bffe796bc426904c19b3466ed7b1030c14","sha512":"ec90b503358763f376f1b77c6cea3b978e9d38ee3aa9fee656030cdd66af14095cef4d6cef8193ea9e245abb3ee55d07c5e5266acb0b4f1e0824c5273dc341f3","ssdeep":"192:boT+z7/ogqnIkBkDhf123wuCAaMoaGjgg7:bo8SZsf1BuCAaMoatq","tlshash":"d922db4076274f38eab32825b4ed5001b31c2fc6c482a552a0fd67825fcbd76aa9d76c","first_seen":"2026-04-28T02:33:41.678664Z","last_seen":"2026-05-01T13:58:35.288037Z","times_seen":5,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/Rank.vue_vue_type_script_setup_true_lang-7bfe15c6.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/Rank.vue_vue_type_script_setup_true_lang-7bfe15c6.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-1a3c\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UJttf88M%2FfyKGIpobDz88pO5%2Bu5xxyhrCQE8vPaQW3QUN4aCXPE%2Bj1RE5ZqmBQHfAtSh2cvHSI4t7Ud6FyeaeDv%2FaHtFbb4Tv%2Fr84BO9BU4EwT2h9nehiRItWftkAW2Ljz4%3D\"}]}\r\ncf-ray: 9f4eb4511aae5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6716,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6715)","md5":"d0d533474972d66ec7bd908046c84bb2","sha1":"e3b86cb5221c82b6465cb8fd90557634db03e147","sha256":"c97643f6277c1f377d72fdaebb1b525fadfb757ce9b37e597c8cb5778f53a8f5","sha512":"083f500042d5b275db9253481740d192f5f868d1ee5d992a95002388e12c224cd16604f3cc65e577067eae6d28f22ef7586fb69f394adfe1dbe1d7cfa6c25e08","ssdeep":"192:ISXddUAIpf/n47rsTBuXb76sVLQYe/mwCZmKDkk/3Ic:IS+6eCZiOF","tlshash":"60d1ff516025cabce4f36165b58a9921b184ffc7c167c406f1fd28032beac75979cbac","first_seen":"2026-04-28T02:33:41.807718Z","last_seen":"2026-05-01T13:58:35.327528Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useVip-07a76e90.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/useVip-07a76e90.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-baa\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fOX0X2x4D6P%2B4xw%2FwZqKcrKhAdnhk3SL%2BZ%2BgqcLumtQ27jLtqVA0PAjSAFVJbSwdTTueTwRe6SgsUxhQ1x27xGuoEifMPcDYeOizrz%2BXDNgYT7M5%2BPEs%2FraeD1x9KyKCh4o%3D\"}]}\r\ncf-ray: 9f4eb4529ad05699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2986,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2985)","md5":"69c7d9822776b18d5dedf5d97de57b3e","sha1":"ac57d50ffa791583f71790eb94c3fcd256f604b2","sha256":"9a5404968501785f6cd7fd3d49ebef1d589544ba83176cf073b191d846642c12","sha512":"6fa2718d899265d3a7e6fe65d0401fb95c8fa65ebe0c98a32cba3d85b3943522eafe096f483f92d30aff1fd6c4abf566acecd4e07f968a4cb8ecca720275c13e","ssdeep":"","tlshash":"6e5152abf178097a0bf50878a8f9138711341304f851a5ea52971e419f6bd118ffaf0a","first_seen":"2026-04-28T02:33:41.765708Z","last_seen":"2026-05-01T13:58:35.311814Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e71e9909c3.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e71e9909c3.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 179790\r\nlast-modified: Tue, 21 Apr 2026 06:52:10 GMT\r\npriority: u=4,i=?0\r\netag: \"69e71e9a-2be4e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hhNqVHPfoV7PXCh3pLJ4P9p7F4wWWW%2BdSUga7F0UTGs0j7lyRL61D4xMrfU8ZtnAC0yzraIDaPMnjwYnXkI6rk90c6YDLvt3uhyC3qnmA7Kn6m%2BbvgFTwDaxPx%2FLZSMJ1gU9D%2BXV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4532ad55699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179790,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x691, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7465adbf8cfde6af2d5d1cb4ae3ae7ac","sha1":"4fe8b1654617a600402f1c5cd2ba521b7efc8283","sha256":"fbf6b74dad01faf24e3f4ce0e7f79e000c62ec7d57b14108908907df989ee588","sha512":"ab77269f78e7ef0f59f5c03d4724e30b4cf0e635e66f35a3a6bbfd72021e1e40ceb3276368ac3852c0f2dedf7e8d7abbdc0690e68ad0affe277a4156ec9c7328","ssdeep":"3072:z88H9u4c/UXnJ6bhx10wzChpfZNCb2DbqZzKvLDHzQGSIRG8KNdhoHk:dduP/UXJGdChpfT3KZ+LDTQ5IRG8w7Wk","tlshash":"ea04128253ee11a883856af2f8e93446e52719f97243511e8038ba5b3b703f45f166ff","first_seen":"2026-04-28T02:33:41.641325Z","last_seen":"2026-05-01T13:58:35.33224Z","times_seen":5,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-common.d732e404.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/chunk-common.d732e404.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Thu, 30 Apr 2026 13:39:03 GMT\r\nx-oss-server-time: 5\r\ncontent-encoding: gzip\r\nx-oss-request-id: 69F35B77AFCCE63635256BA1\r\nlast-modified: Tue, 28 Apr 2026 12:27:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15669189220625556632\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: cDYb3Im4ScHyfTRFoHzhNg==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0ca3a24436a7d86916b35130b21285a8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: aoUCxHDZudDY1fniDf387z5wTdlgmozhGVgNm4nmy6gqtFN9NK_M3w==\r\nage: 81307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":27007,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26864), with no line terminators","md5":"70361bdc89b849c1f27d3445a07ce136","sha1":"ea798c80612b487c619dd887adc3f7fe53f1fc4c","sha256":"77e605ab99763ca16e73b4d29e49a0d7350a2c43d7c64305615a7c8cc1aa2fe5","sha512":"46a8c496a333ffc5f8f1d30c8153c08fd189efa6962a762ec03e7dc92e8691127f2c76f3ba361fba7446add85f91d36701396a0a3713f5db60b4c6a5418ae1f7","ssdeep":"384:kF9kWEuK2U72UecAvTbDPnPuTc2YejErqSqcDRVE1wDTaR5HJrCiKMcJHI7jW:q9mZ72UecAvrPuSqSpE1IMoyW","tlshash":"a6c222ccf2d7f0650b9a38a481bf110ae23e7d99b44e9196d261e0c17c3454da273f9b","first_seen":"2026-04-28T13:21:41.18375Z","last_seen":"2026-05-01T13:58:35.317886Z","times_seen":45,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useHome-e6e4444c.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/useHome-e6e4444c.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/tabbar-4ecd2a86.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-d85\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vp2Bno7KCFxaxOyAIe1mmvgVjB1azGXpgxgkdpQSxSoFl9uLKUsw8lfibtyU%2BDL%2BT1Pbzfn9WnPQG4aVQ9nKXF1iQK2JJeLhHyU7F6gadReAJKqcBzBL4oQ0iHZlgJoZ4GI%3D\"}]}\r\ncf-ray: 9f4eb451fabb5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3461,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3460)","md5":"f960a8785dc5ef3e261d9f0b128ea265","sha1":"6da2c63323e444389083cfaefc248d60a69ae9ef","sha256":"1b48ec90c657395e0921bb86a855ea70a079127f9238d2e17388a66d8af85f8f","sha512":"0eaf2b11554a32b2f25fdff3a2970337bc329d20dff8c5be7409f2cb96265a7b319de408bec6cb8e5767a345fcbc7ef145b39c4d0adc8b439ec626d018c48ecf","ssdeep":"","tlshash":"a6618348b3b38078c7b919b016e90a01603eeb19dc57e0cdb1a30555577bfe6b8dcea9","first_seen":"2026-04-21T13:48:47.852231Z","last_seen":"2026-05-01T13:58:35.302722Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/index-89c6254f.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/index-89c6254f.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZblow3hsFDmCMuiY3ri5g5Got7UWkAOr87Uy5WFxcs35q67UQ4wtv%2F5FmbHgsnEauUQQamoryHU4%2BnbU6q2AaodVTto6gWMBWCI7m4%2FxfcS%2B8mf7VLM4CCHIOe%2FMg%2BYxpo%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-385\"\r\ncf-ray: 9f4eb4529acd5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":901,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (900)","md5":"9da16dbf24c463162ba5c57752cc748c","sha1":"dd378aa977ec0c40a73739059e527d61bd0f769b","sha256":"77fa1e99de5e1610b5f29f4f6656951dd605c6decdf8f3142498a156a52e814d","sha512":"1d29cb3517d8e0b6788c8bd63ef86fe4c4d374a5435c3a02fb7892a438c1eef22c7c52978bdd00a0886d4891cb9b6294d05ecd7be0cc855e12c4353eb003b365","ssdeep":"","tlshash":"6311232bec95f1704153989ca6680ba3a3cd7ed8213093d4b65e8d7807641ec703a60a","first_seen":"2026-04-28T02:33:41.823137Z","last_seen":"2026-05-01T13:58:35.30482Z","times_seen":5,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e724bc5248.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e724bc5248.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18978\r\nlast-modified: Tue, 21 Apr 2026 07:18:20 GMT\r\npriority: u=4,i=?0\r\netag: \"69e724bc-4a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ia4gldrWNEsXcT8yT7W139P8gKKY2DLOI6fnhptyjiiLHyvltDWgtQmpOz%2FgN%2BjeU8L0ds2XPc8or5P4ksp9SZaSBqt%2B6dneEeYx00EwHyD%2FuON1DSXTY%2FgmmBkMRFE0EU%2BOJ5G9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4536ae15699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4ff778660712b0683d34ae42bc1d5c","sha1":"05265637e3fcba97e8fecdce8450ccd54dd1b9ac","sha256":"92bfc815f955ee275b0f94ab0aa54742a068b5e2b227bfdc6b4cefa5c81997b6","sha512":"689ce8a04406e551fe1f6e5e2875db48827ff9d0a1a86a3d96d6f077a5b94b88071d38d9aa797ada8dff8bf9a4040db043a979539b7e8564e3f3d3f8a5575863","ssdeep":"384:A4Yibri2tmmqi55lB7Oppn3B03Pud/+FWdTU3j:A4hbrXtmmqo/OpVu3PuUI9Oj","tlshash":"ba82d0db1069f8bb8111ee36724bf49bf53c07d076ef81142785b98d8208da5f796638","first_seen":"2026-04-28T02:33:41.649603Z","last_seen":"2026-05-01T13:58:35.293415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=733c96278a4f986a1bf68b1d95b8b551\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651150\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 12:46:38 GMT","end":"Sun, 14 Jun 2026 13:46:34 GMT"},"fingerprint":{"sha1":"4C:14:A3:50:BC:B3:C2:AC:E9:F6:88:D4:36:B2:E6:AE:E0:D4:64:D3","sha256":"C9:AF:D2:80:FE:11:04:07:0D:92:35:3A:19:79:9F:31:89:4A:2E:34:36:0F:DC:BD:33:1A:A8:E2:82:15:41:42"}}},"request":{"raw":"POST /client/log/log?plugin_sign=733c96278a4f986a1bf68b1d95b8b551\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651150\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 743\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":743,"data":"log_type=CHAT_MSG\u0026data=0qH8PTXG1nmb1nohMhHG0ec5rnRhBdH40NYVyAKh1nmEtuzEPQcV03chN9XqfQzqyh8ht3zZrnkhMhyhBdHQP3zSN9VvyAKhyh8hrQjWtazqrnshMhyhBdHqP9zwNScmf3DhMAspyGrVfGIEP9khMhH9lCkqMCkkBAHbl2fSI5lSM2y5l2RSldypyQj%2BPQtasntVyAKhrnkwXXlhBdHafQ8hMhHKtTc8f5KWB9HEPQu%2Fs9DwtNIvBQIWPCFABqypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6Ryh8hP3zGN9c%2Bt3OhMGphr3HnrNH51nz%2FyAKjBdHV03V5t3V%2FrarVfGIEP9khMhyhBdHVfGHWfhyiyGwfyQaVfSI%2Br9XfyAEfyvORPNX4sNcEP9kRPSYVfQu41nz%2FyTt%2BfqY%2BtTcVPNY4rnoRP9kRsCYvsNc%2BsQu5rCY413u4y3cErdY%2FPSoRsnjpPSfRPNX4sNcEP9m5BV8hbCypyGI4PSHV2QuwrNlhMVwgyQm%2BPnDhMhH5snjVf9a%2BfGcp0Xz8N9tkITIV1uzp1NI4yh8h19XmD3u41dyiyQVvyGatbN4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 12:14:11 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4eb457fcb156a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-05-01T13:58:35.309294Z","times_seen":1875,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":34,"dns":11,"connect":1,"send":0,"wait":193,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-auto/user/trigger?login_token=2dfb313f9973416248758b4c448585f5\u0026chat_user_id=a5ef914b39cdc01f67756a2b99781a1d\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651924\u0026_lt=2dfb313f9973416248758b4c448585f5\u0026_u=61ddbdc777c7b496af8e8d1c75858381\u0026_xma_=392765","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 03:56:18 GMT","end":"Fri, 19 Jun 2026 04:56:14 GMT"},"fingerprint":{"sha1":"3D:A2:6B:19:97:82:23:11:10:B1:04:28:BC:92:55:73:D4:24:D7:6B","sha256":"FD:D5:E1:0F:63:14:4C:3D:C6:7A:C3:2C:AB:8E:7D:73:CA:F4:E3:D8:7B:E6:08:8D:E9:3C:FD:57:04:B0:51:A6"}}},"request":{"raw":"POST /chat/chat-auto/user/trigger?login_token=2dfb313f9973416248758b4c448585f5\u0026chat_user_id=a5ef914b39cdc01f67756a2b99781a1d\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651924\u0026_lt=2dfb313f9973416248758b4c448585f5\u0026_u=61ddbdc777c7b496af8e8d1c75858381\u0026_xma_=392765 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: ss_uid=61ddbdc777c7b496af8e8d1c75858381\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"is_new_user=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 12:14:12 GMT\r\ncontent-type: application/json\r\ncf-ray: 9f4eb45cc84c56c0-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://binance-usd.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 46578b7b-ecc9-4c7c-bed2-7d7ebf5f74e4\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6b210154a96c28a41ffbe341a228c02a","sha1":"2e5751bde9f2323a79989d165f22ba111624ab76","sha256":"57109c9877bb6690c6284c7b2b98088071ee4762449b6b5659dd908bf9d703e3","sha512":"16fc9ff07ff4e167be6b24dad448fe7479cb1e5b50d5e7f251c84852e4c67d8caff68a1eae5be69b8f4561d97bc6d41be026597033718181025b3a97c7e292fe","ssdeep":"","tlshash":"89800023282c2c830e0238cc880e8b8820e820808e200330cc8ca228cb080a8ba82830","first_seen":"2023-06-30T01:11:08Z","last_seen":"2026-05-01T13:58:35.316727Z","times_seen":1629,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":29,"dns":7,"connect":1,"send":0,"wait":277,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/BaseUserTab.vue_vue_type_style_index_0_lang-8bc70cd2.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-8bc70cd2.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dHMrY2MbWzlOJFhMQQHJPjnCaI8Obwgwg5SeEbYVv0%2FcTQEdeAVMw8AHNzhnP1opkE4PndWbDeEWpXIgGZyU%2BvuEt60HWD4hKsZbkFZh6xIamVsE4JcKx45pHTKSAZIXaJM%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-2d4\"\r\ncf-ray: 9f4eb4511aaf5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":724,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (723)","md5":"d6eb86ad0c578162c281f0a08991ee21","sha1":"1440b85b4a96b9ee3c4bd9863d6cc7e65c2ba632","sha256":"3ae188eeb355b75490634ccbd859afd086de44689f2e37bc718f57334e285053","sha512":"39f18ee43b8df8453791d8f56cd710e28d65c5700a341a9722c5ead15b63f07a0098a6c8213451d6e1954ff622c0f08fa33d2f2bb86caf841acfd71e07ed5351","ssdeep":"","tlshash":"510149dc58f9cbf9849306543e2a5050d0958f94db39cd4570ec1a32274b8b1b6ee37c","first_seen":"2026-04-21T13:48:47.880093Z","last_seen":"2026-05-01T13:58:35.32577Z","times_seen":6,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/Task-631d2fe7.css","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/Task-631d2fe7.css HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-bcd\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HD0jWaWfJcIAuDwIMwjFjqMHpFgOz5Ez%2FWyw0GpLufrkJtwv1TsXGj4GKrei4YVmojm11RLgLlrsaiIvJgemAjMD3A6zhDG9S3X7vg5nKuld3XByEkvDsLjuZ0jGA7bcwTY%3D\"}]}\r\ncf-ray: 9f4eb4509a8e5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3021,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3020)","md5":"1a9a14974c92852114082b2a56c5a7ab","sha1":"9ff1d73815058f6965a7d20b5c8287e06b7d1ba1","sha256":"631d2fe7de80f7fc9aba86e7589b52789ef43a84a9653a3a7d513404c78a343e","sha512":"6edac5fde5a56f84b13417d6ad96c122e182e2897c45fefb83cf9ec5cc4b76b87bdcc59cf6ec6e2cdf736fbe0f2d954aeb5c51de52e3db61622ab8e5c5b54266","ssdeep":"","tlshash":"9a51d1b8b81ede5972bbf0697881b945507cf57381348626fd8a75308aef7627427380","first_seen":"2026-04-15T23:06:55.503546Z","last_seen":"2026-05-01T13:58:35.306279Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/code_project_plugin_gx4seh.js?t=1777637650204","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/code_project_plugin_gx4seh.js?t=1777637650204 HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: application/xml\r\ncontent-length: 393\r\nserver: AliyunOSS\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\nx-oss-ec: 0026-00000001\r\nx-oss-request-id: 69F4991258A49D333425034D\r\nx-oss-server-time: 2\r\nvary: Origin\r\nx-cache: Error from cloudfront\r\nvia: 1.1 0ca3a24436a7d86916b35130b21285a8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: dGyEpmqgJiUye7_rFRuqt9uuLRXLGC4kgSJnWhysPXn_UCaZigLLdg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useNews-8a42c888.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/useNews-8a42c888.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZxbbQODxuI7HtPC1cbFYymhLXWP%2F0mbRyhKJYWzhwCKix66ImD67gDe6ZLoOzR9CkED3cN%2B4OY0ATKBzFIgC61omjYyvjVqO1HB470Jl16Y7AT1M3dUskWqqP5LxciavfTI%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-394\"\r\ncf-ray: 9f4eb4527ac45699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":916,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (915)","md5":"0cb7b213b7bca441989d3a3863ce8b79","sha1":"c145217e9c6f7add9019c9ca10424dcdcbaa2478","sha256":"a7d1a73a1c22ba6bb0933d372965a847f0f23515e3ca0f393d60ce5608b18d95","sha512":"9501e9276d622186e62f3ac0c6ef0c0f773bd3149e1e846492f69b8db3d785096e41f1f1d89a78c9c97c74fcff66bad78d05ad10f200d244c20234bad5d44750","ssdeep":"","tlshash":"9311404db066d3f861bf1c0c24520018216b5b847931e8c0a3be09931a62cf0e53ba3c","first_seen":"2026-04-28T02:33:41.846494Z","last_seen":"2026-05-01T13:58:35.291276Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useCompany-d95bed5f.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/useCompany-d95bed5f.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8YK06QXBDdQ0N2kVstsDBQHOOELymYsnFP4FQJ91bGWBvbevsUlxQTtwoIcNp%2BwK2C2%2FqIEOxJpUUVVj4QkxwSmJLdHKmniG%2FHt4ODkJWpeR6K1dGYw0COoTD6xoFjOBXqA%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-e3\"\r\ncf-ray: 9f4eb4528ac85699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"dfe9033e730d9f42f20187c47e5907d2","sha1":"d30bd194a5670d525289ab008fef0f54f19faad0","sha256":"07ad49594dbe1f8ed045b89457befeb5841c7c2840f5c50e9016835d053b0061","sha512":"e63d1d39cfb26234f4d7d9594eada724f3302b83ba95debc627d0a9588f986b82a4a4a3b0e1582213437ea533da933b27dc09e41be49b6b06c78b0b6e889a59c","ssdeep":"","tlshash":"fbd09728a00413f912b7389c5338b82800a2a170330a86c0891a0e050be6ae25167e0c","first_seen":"2026-04-28T02:33:41.796208Z","last_seen":"2026-05-01T13:58:35.294781Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/setting/sounds/ling.mp3","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"13.249.8.42","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /setting/sounds/ling.mp3 HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: audio/mp3\r\ncontent-length: 47223\r\ndate: Fri, 17 Apr 2026 02:30:39 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 02 Jul 2024 06:29:42 GMT\r\netag: \"1065fe976ff9e98d69772fe0f0d7b808\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=15552000\r\nx-amz-version-id: J6b7RzocQsVXwTzS3QxevgOr1gKTyblY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-47222/47223\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d27d3f4230954794eccdc551e04ec846.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: z3GxlLnkPv8veoqz_wbeWTsLq1lRCVIuEGUcXxqkFEG9zgoaqbW_nw==\r\nage: 1244612\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":47223,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo","md5":"1065fe976ff9e98d69772fe0f0d7b808","sha1":"122193fafe8453db01635cf4502524eb93264fdc","sha256":"35fbb2ad61551e3a396591657a66b563222454418238c46005b89418556f9983","sha512":"7d0de1b98c66aaa939f56253d100f5efc36128c2b8420fc8c932f68873a643a1179411a9410125aa3ff5512f74dad1209f2e19c5a0734d4582c5b94280e242a7","ssdeep":"384:ju+iqqxhBRBJ2zjBQRB57Nsyf+/C6ufaPkm5NyxGo5Vtll9rFd1ft7FDehm:junhJdlac","tlshash":"00239434b6a108d0e14eaaffb0deb2121e771ec3cd56a84075ef78044fb1179255b8b6","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-05-01T13:58:35.290218Z","times_seen":2454,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":17,"dns":2,"connect":8,"send":0,"wait":11,"receive":9,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/api/public/index_info?d=1777637649984\u0026language_type=en","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:09.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"OPTIONS /api/public/index_info?d=1777637649984\u0026language_type=en HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://binance-usd.com/\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u5SgjCVHiLfFyWk5zyeEN%2FdVEYeAv3Ho6ZTlB9ZDSW4gaUstrIdOEoE9Tbmi4i%2BM0s6tF8hAYDZ%2FhvoKR3zJsLQZp%2FQEmdxUNXwRFj1oSCn3jJ15N4R1NfftZ8CHfDcwlrzDBfB5\"}]}\r\ncf-ray: 9f4eb4507a8a5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e73beb95d8.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e73beb95d8.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 131856\r\nlast-modified: Tue, 21 Apr 2026 08:57:16 GMT\r\npriority: u=4,i=?0\r\netag: \"69e73bec-20310\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kXj0%2F3kG4sE9rUkNoMlIk%2BLt%2BX3tzNycmSmXj7%2B4MH6FK8mT9yHrXHv7LozcmT8haTT1rBfm5mmBmb%2FDKiYsLYVX5pcTcdMZW%2BIdU43m1YhfeTFAOvpaaPbhfMohKrgRAYbc28PA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4537ae85699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x824, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8839ca37827b888a251905fa4295fe78","sha1":"5fc60cd827ff8ce5ecb88c412c9f54f00874a5e8","sha256":"df6dca1573c07922bfdff6b3a4f9502835829b2d492022b06847fed06fad3fb1","sha512":"1935aa4f938d5e87b47e80247a026b71eb6ab2630ada199c4dd3d205ed15e06892cf1857fdefba7644e1540ca972418b30b16a3222a2b9650528d1b3aab2addd","ssdeep":"3072:PoXlZffU7wTdl8KJmVVVaOjk0fRM1w7whpPjf:QX7s7wBl8KJZO40JM1X","tlshash":"74d312ec5c00f532e21d65fd6efbd8243bc82470fd7814612588cb19acb2e5ba4668e7","first_seen":"2026-04-28T02:33:41.906887Z","last_seen":"2026-05-01T13:58:35.301385Z","times_seen":5,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:08.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sc-static.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 22 Oct 2025 00:00:00 GMT","end":"Fri, 20 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:63:7D:63:F2:DF:8F:C5:65:EF:16:8E:06:3E:E4:66:D9:41:67:CD","sha256":"91:A8:D7:CD:20:36:14:EC:9A:D5:10:BC:DD:44:F1:9D:26:20:78:F8:92:93:7B:37:6A:F8:E9:7B:FC:7E:72:66"}}},"request":{"raw":"GET /scevent.min.js HTTP/1.1\r\nHost: sc-static.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ncontent-length: 24909\r\nserver: CloudFront\r\ndate: Fri, 01 May 2026 12:14:08 GMT\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: private, s-maxage=0, max-age=600\r\nset-cookie: X-AB=9f64bba91d1b4d27aefc45e8773e7f5a;max-age=86400;expires=Sat, 02 May 2026 12:14:08 GMT;Path=/scevent.min.js;Secure;SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: DqtTIcD_M3_FKrGtENQZO1eloafBy1654JhZxmknNVuyOqwE7seDyg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":59263,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (59236)","md5":"8f6487b2abdd19da7d2000e6948f4f1c","sha1":"b979b115c298e978f27467edb31ab1b318aed3a5","sha256":"23564c65f40d1f2ab2dcd8eda148222b38bc88958330ed728181f713a56a3ff2","sha512":"6c2d9837a4fc8300b16bebcba72c85ce0d21b7c1724ba5d87d809a1c463594354421f5fb935823c209e177d449741ac9cff38f1c271aa9375a42326356df115c","ssdeep":"1536:kb3gziinUta4oiLsXb2U/LuG0ch4Hl/HDTkzNZkVXK9:o3l9P+Lj4TY","tlshash":"6543d58cf7d9b02103973472487f541be33bba646c4bc650c526e5887dbc59aa237eac","first_seen":"2026-04-23T18:32:43.944826Z","last_seen":"2026-05-01T15:42:22.340634Z","times_seen":1049,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":39,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/product-e391d1b8.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/product-e391d1b8.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GuCU1%2BO4n41gE6Rvi2CM6y53oerdhAQB7BJBdEXNKqrzpmU5QC5kWeQcGjA%2FhT%2Fe01aWYHn%2F2DR%2Fdm4i%2Bojpl2mnHS2puvOHxOZZJP8sfv65z1%2FoOQCTGtv7kGRRg7maXQg%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-2ad\"\r\ncf-ray: 9f4eb4510aa95699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (684)","md5":"ec6ed510d9ea2dd4b8b4d136342c28d5","sha1":"ba36ae6418478311ef7e6b65ee59016b7a9e31b0","sha256":"95829cab8b253dca9a69c5a86c886b7de891418cb27beee6bd91d57a6f163946","sha512":"c162b5ec9821e5820489177cd4b0aa90275508da66f4f146e0ddaba1ef8fc28c4e2b737ea8c3eb3a36ed0a70b8a8b70237028f8ad840217ed1ac4c7f091d3465","ssdeep":"","tlshash":"9c012b4e6c6ff3c94557e8b0a120ce058e19a960fa4d47f87f547b1176c218a6199b34","first_seen":"2026-04-28T02:33:41.696831Z","last_seen":"2026-05-01T13:58:35.287534Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/InvestCard-5b048186.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/InvestCard-5b048186.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-5b40\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vqEUUMN0aw%2FxDJ4%2FSKMc5nXlEZnhTpX4kqQC1YUb917%2Fm5iry1swQ3B4W2z9KiCPimNY77NOqvNq05wYbsDI1lwrXcCvdgxj0ymOUkeXE3SMZ%2BX3zkQ2NLl6zz6k5n%2BYfqY%3D\"}]}\r\ncf-ray: 9f4eb4510aab5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23360,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23359)","md5":"d854b6d4a8ad6a5c409b08ea3d523726","sha1":"943c7d28fd317a370b5ca061ee41f22db47083e7","sha256":"ae5c2f691baaeabc2db8f3147b9f813a674fe9f0e923579747f56b5b96f11ddc","sha512":"b229383f72a2f38d7ad590163c933bf354a57d9c67148a40b39e690a56a423cf588026d0c0cd5b8b360677acfb9e5d1cd59ad65a58888fb141d43120628a920a","ssdeep":"384:hzJ58J5WtYHGhgRoMxJuB3j4n+AVRcwJKkwmzW1/X5/Xq/XB:hP8WtYGgRoM+Bz3AVRcwuc","tlshash":"0ea2a561d032c938e5fb78a0108c854476192feed2a18876b0fceb465b87c7c575e7ae","first_seen":"2026-04-28T02:33:41.782312Z","last_seen":"2026-05-01T13:58:35.297121Z","times_seen":5,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/autoplay-01e26a3a.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/autoplay-01e26a3a.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-144b9\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qSLEMcQ32cqsmJl4sfNRxmar6G2iOpILi1PojyMnUQSf6mOM1fMOkrP4zSIyvGm5cCPgDfzcJfpEpFDZWNwnXj68uiRvpZXAZZFI24OXwJYQntxAGdZVeglG5o6k1GLUOlU%3D\"}]}\r\ncf-ray: 9f4eb4526ac15699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83129,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"25fe6bc9b92d38094fc299a7858cf09c","sha1":"6e6737941e6629350f0c48ef858f913e152b7e80","sha256":"c0e2ec1f211c32008e93e39a3192426801aea5853fa75d66fd64dc4c8a8377e5","sha512":"42d33fc17872316218d26e2b8724e58c048999a5881b42c6cfa5eff9abc1fa423a001496f806369055b9ac446251c1277a7689692fc89763052f1ff0c3cd54d8","ssdeep":"1536:WfA+DqolxUdfGB+TLsUimRCsdRPQhj9rjzVPeXV/wTmBrvl9V:+x8RPQhjPIp1","tlshash":"45831a89b224b17706f75a8b82b5c21172b44948f805d4e4b1fd5dbb486e98813feff8","first_seen":"2026-04-28T02:33:41.882806Z","last_seen":"2026-05-01T13:58:35.319086Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=a33f6863c4580e0034af4f409003d2b5\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651185\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 12:46:38 GMT","end":"Sun, 14 Jun 2026 13:46:34 GMT"},"fingerprint":{"sha1":"4C:14:A3:50:BC:B3:C2:AC:E9:F6:88:D4:36:B2:E6:AE:E0:D4:64:D3","sha256":"C9:AF:D2:80:FE:11:04:07:0D:92:35:3A:19:79:9F:31:89:4A:2E:34:36:0F:DC:BD:33:1A:A8:E2:82:15:41:42"}}},"request":{"raw":"POST /client/log/log?plugin_sign=a33f6863c4580e0034af4f409003d2b5\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651185\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 560\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":560,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHG0ec5rnRhBdH40NYVyAKht9V%2FN9jWsnohBdH4P9wVPhyiyhypyQrpPStb1nohMhyhBdHQP3zSNSHVrhyiyhypyGHWP9abtTV8rCyiIh8htQXqf9VWPhyiyGsjBAymBAR%2FlVFjI5fSl5fmlAljMef8yh8hP3u%2FrSX%2Br9DhMhHVPhaXDqypyGXqPdyiyQ%2B4tTY5MhFWsQV%2FsnmArCaaf9o%2Fs9zwBqlWyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2Fld6hBdHaf9Xbt3VwrCyil5DSBdHpP9tbr3u4sCyi0qHhfQzSf9XqNSIafTYWfGohMGphs9zW19VVfqyilC8hP3zAsnj2t3zqsntVyAKjbC8hsSXqfQX%2FtuIAfQV8tdyiyhHzbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 12:14:11 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4eb457fcba56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-05-01T13:58:35.309294Z","times_seen":1875,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=d585ae0c6c5f0e9c0617e2c3e583349e\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651938\u0026_lt=2dfb313f9973416248758b4c448585f5\u0026_u=61ddbdc777c7b496af8e8d1c75858381\u0026_xma_=392765","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 12:46:38 GMT","end":"Sun, 14 Jun 2026 13:46:34 GMT"},"fingerprint":{"sha1":"4C:14:A3:50:BC:B3:C2:AC:E9:F6:88:D4:36:B2:E6:AE:E0:D4:64:D3","sha256":"C9:AF:D2:80:FE:11:04:07:0D:92:35:3A:19:79:9F:31:89:4A:2E:34:36:0F:DC:BD:33:1A:A8:E2:82:15:41:42"}}},"request":{"raw":"POST /client/log/log?plugin_sign=d585ae0c6c5f0e9c0617e2c3e583349e\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651938\u0026_lt=2dfb313f9973416248758b4c448585f5\u0026_u=61ddbdc777c7b496af8e8d1c75858381\u0026_xma_=392765 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 857\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: ss_uid=61ddbdc777c7b496af8e8d1c75858381\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":857,"data":"log_type=CHAT_MSG\u0026data=0qH8PTXG1nmb1nohMhHG0ec5rnRhBdH40NYVyAKh1nmEtuzEPQcV03chN9XqfQzqyh8ht3zZrnkhMhyqr3rhl5O5rAvmI5l4l2sqIeRSI2%2BhI3l4IeRaMeXQICypyQrpPStb1nohMhyhBdHQP3zSNSHVrhyiyhypyGHWP9abtTV8rCyiIh8htQXqf9VWPhyiyGsjBAymBAR%2FlVFjI5fSl5fmlAljMef8yh8hP3u%2FrSX%2Br9DhMhHVPhaXDqypyGXqPdyiyQ%2B4tTY5MhFWsQV%2FsnmArCaaf9o%2Fs9zwBqlWyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2Fld6hBdHaf9XqN9VvyAKhs2XVrAvjI3y5MnIvs56jrAsSI5D9s2HhM2vSMeu%2BlnohBdHpP9tbr3u4sCyi0qHvsVrVfGIEP9khMAOpyQXk1NI41nmGXQXqf9VWPhyiyhypyQXqfQzqyAKh0a8hPnX5f9uGrX8hMV8hoCYwtNc%2Bt3VWPhYWf3XqsNcEP9kRt9u5y3u4t3XwfTcVrdYWPhY%2By3c%2Bt3uhsNIVyTcKsNoRr3Vvy3mWtdY%2BP3jWtqYwtNc%2Bt3VWPGl%2FNdHzyh8hfScWfQXMsnaVfqyinSphPQuwrCyiyGI%2BP3X5Pnuqt3jmNSYbrSR4f9XKN9jEfSohBdHZrNVosNcKyAKh1nohbXazbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 12:14:12 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4eb45caa36569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-05-01T13:58:35.309294Z","times_seen":1875,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/api/public/get_lang_json?d=1777637649499\u0026lang=en","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:09.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /api/public/get_lang_json?d=1777637649499\u0026lang=en HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-ctime: 1777637649500\r\nst-ttgn: 9163ad743bdf24335add4610817b311e\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:09 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c7fonD8W9LbUMe1ajrJjaJkR8Jcq0auH9%2Baq8BV8G0WIRLVYziCI8Tnsd%2FwKZ0zW2t250Bb2TJ%2FjlJmzB4hUElCeCI%2BWrh%2BIjF8mKlIkvR0%2BFDycPkDCYXz8aI3WwgYaJfVklkSq\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb44e6a735699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26113,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"af95d3bedb1ee2212813799d92708336","sha1":"b0747bcb1e25b9245e5c1821cf22475f83bd72d2","sha256":"cbf5c53b2c8b11f268cfd34b8dff7b5aba571fbd68afd4477175bbec6b2c499f","sha512":"09ecab4e031b5cdfe5eb3092c93d40191937271bb091306fb40e7f356e5b7cbe01b641951ed585e13de42fabdfe4565c70b4c557527b7e5e327c7c9b575f1c98","ssdeep":"384:/PvNQBAT0andjWglUdz6/4BlCqcP82a6N+UdUE/2KyKBqfGSu/eLX7CA7xlgQ:XlQST0aZWg0cP5fuE/2KmzRf7EQ","tlshash":"38c2c84f720a0e73afd35bc1789b6d1725f551c31690084d8cdeca2c12adf99b22f19a","first_seen":"2026-04-28T02:33:41.917691Z","last_seen":"2026-05-01T13:58:35.320027Z","times_seen":5,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/BaseLogo.vue_vue_type_script_setup_true_lang-07f76166.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-07f76166.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/tabbar-4ecd2a86.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lLTk960wJxDt18OIPD3LHBjxSnbvi3uzUmUenq9%2BqzWdpXZPHm6RS1qmz3Vqfwe1oyN6NuOtyTTg%2BCOaY7053lZGakUd6KsXh7KUUP39WoTxxyUbxMmGYnVWb7bDHvc28bU%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-20a\"\r\ncf-ray: 9f4eb451faba5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (521)","md5":"e82062f1a921352aef9fef6dce1b7208","sha1":"8dec9bae4ce5cf3ea9d117127bac8adc1a771889","sha256":"446cd1f6dec844102e2a5f329331230f622aa4d199b50778c9932e3b16a92c8c","sha512":"a6e50efe75c3345bfff4cbf85aebc5b6c03e8f155b4a34523610c1ec6269885cc714d47fe631b821b25d9ed8808a40076f3206a574da49edb80a5dfe18f53593","ssdeep":"","tlshash":"9ff0c00f5c2a91ff40a658982b47604111095fbdc6209dd4f3e52274624186a701d668","first_seen":"2026-04-21T13:48:47.863202Z","last_seen":"2026-05-01T13:58:35.295366Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e725165fa7.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e725165fa7.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18978\r\nlast-modified: Tue, 21 Apr 2026 07:19:50 GMT\r\npriority: u=4,i=?0\r\netag: \"69e72516-4a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hEUvWU%2FngcNGh8HjJN8bz%2FNuQVA2q8MpxNyLmn%2FmIdy3O5CA2mDsUleDcEZa1mpKGT7VW8fLjnqLA0L%2B5ChYMED9D3aT08hSRAvlUWdNDd6%2FEc9fRX0hwqBjQsH9RaBhG%2Fhk8Sb0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4537ae25699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4ff778660712b0683d34ae42bc1d5c","sha1":"05265637e3fcba97e8fecdce8450ccd54dd1b9ac","sha256":"92bfc815f955ee275b0f94ab0aa54742a068b5e2b227bfdc6b4cefa5c81997b6","sha512":"689ce8a04406e551fe1f6e5e2875db48827ff9d0a1a86a3d96d6f077a5b94b88071d38d9aa797ada8dff8bf9a4040db043a979539b7e8564e3f3d3f8a5575863","ssdeep":"384:A4Yibri2tmmqi55lB7Oppn3B03Pud/+FWdTU3j:A4hbrXtmmqo/OpVu3PuUI9Oj","tlshash":"ba82d0db1069f8bb8111ee36724bf49bf53c07d076ef81142785b98d8208da5f796638","first_seen":"2026-04-28T02:33:41.649603Z","last_seen":"2026-05-01T13:58:35.293415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/InvestCard-5b048186.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/InvestCard-5b048186.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-5b40\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KcKzgz9WEfFHN9MlDznkDvMdqMx6H%2B1KKItMC26MuhTU%2Fh9l4pGijX8PpUz8m7bK14Mm91ZbWTFJN63hm%2Btw8jdYcHZpPvVKSR4WJMTby877AOB93LT3gliOljibmRw3nIU%3D\"}]}\r\ncf-ray: 9f4eb4528ac95699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23360,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23359)","md5":"d854b6d4a8ad6a5c409b08ea3d523726","sha1":"943c7d28fd317a370b5ca061ee41f22db47083e7","sha256":"ae5c2f691baaeabc2db8f3147b9f813a674fe9f0e923579747f56b5b96f11ddc","sha512":"b229383f72a2f38d7ad590163c933bf354a57d9c67148a40b39e690a56a423cf588026d0c0cd5b8b360677acfb9e5d1cd59ad65a58888fb141d43120628a920a","ssdeep":"384:hzJ58J5WtYHGhgRoMxJuB3j4n+AVRcwJKkwmzW1/X5/Xq/XB:hP8WtYGgRoM+Bz3AVRcwuc","tlshash":"0ea2a561d032c938e5fb78a0108c854476192feed2a18876b0fceb465b87c7c575e7ae","first_seen":"2026-04-28T02:33:41.782312Z","last_seen":"2026-05-01T13:58:35.297121Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/TaskList.vue_vue_type_script_setup_true_lang-d7bf96dd.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/TaskList.vue_vue_type_script_setup_true_lang-d7bf96dd.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGOmPPVC9w0T80nxbNv3xV8W82o%2Bw34CwZp1WKJ87HtOalScX50PvJeUR%2F5JHBB9pUy%2BltkUGbPceEx6%2B7%2FuZ%2B1o7SThPoS8IQHriXE8rS00SgEPvRQAR1bnXrV4290SWVg%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-222\"\r\ncf-ray: 9f4eb450fa9f5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":546,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (545)","md5":"c25c28b0af75c92de44136f52b589bb3","sha1":"d2bbb08634f736e7a5dd609196be2fdbe1f5094e","sha256":"676cf90f44081da854b2d63f50f6108f987b425af8aa4bea38588868eca396c3","sha512":"d48d014e4a2261f09af16f68cde038c8e5030211df075873b7ba2cf5cae31a5a048e0a2d023bd876dbe203bb1c4c2e75cba4cb9c207e78edffb675e3b6128189","ssdeep":"","tlshash":"b4f0c08e7d0d56b383598db4b37a446260940357632c91d4f84e0877d3114a4a87fedb","first_seen":"2026-04-28T02:33:41.84013Z","last_seen":"2026-05-01T13:58:35.304464Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/route-block-83d24a4e.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/route-block-83d24a4e.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27\r\nlast-modified: Wed, 24 Sep 2025 08:42:59 GMT\r\npriority: u=4,i=?0\r\netag: \"68d3af13-1b\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yRHRjUe9AepSPMXtclxMKysUBFhjswlZX0T34TuEOlCLYzWi7%2BRr4YKqnAO%2FHXYPbgBGDvyN%2BgAcZl0JJSTPOPjal14XQtP0vVXR06eZMqFVbNHyAdAEaTsTpFeRMRJOk5Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4511ab05699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-05-01T13:58:35.287024Z","times_seen":646,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=5429c246f61f861927c46ac228e7776c\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651133\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:11.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 12:46:38 GMT","end":"Sun, 14 Jun 2026 13:46:34 GMT"},"fingerprint":{"sha1":"4C:14:A3:50:BC:B3:C2:AC:E9:F6:88:D4:36:B2:E6:AE:E0:D4:64:D3","sha256":"C9:AF:D2:80:FE:11:04:07:0D:92:35:3A:19:79:9F:31:89:4A:2E:34:36:0F:DC:BD:33:1A:A8:E2:82:15:41:42"}}},"request":{"raw":"POST /client/log/log?plugin_sign=5429c246f61f861927c46ac228e7776c\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637651133\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 482\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":482,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHG0ec5rnRhBdH40NYVyAKhf9uwrXzvsNVbP3z%2BrdypyGcW19X%2FyAKhyh8hrQjWtazErdyiyhypyQrpPStbfQXQyAKhyh8hfQzWPXz40NYVyAK9BdH9rNH51nz%2FyAKhtAO%2FlAv%2FMdkqN5OSI5f5I5vql5OkI56hBdHpsnmGtnuGrCyiyQX%2FBXX2yh8htNHpyAKh1Tc4fTliBqzh1nm%2BPQIVBNX5rdmAP94WyqFhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8ydypyQjWrazvsNc%2ByAEgyGcEPnX5t3uwfdyiyAOSI5f9l5f9I2Ojl5OhbN4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 12:14:11 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4eb457fcb856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-05-01T13:58:35.309294Z","times_seen":1875,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":48,"dns":24,"connect":1,"send":0,"wait":194,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/api/public/index_info?d=1777637649513","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:09.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"OPTIONS /api/public/index_info?d=1777637649513 HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://binance-usd.com/\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:09 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7egDmvaPQ99azsbJrsWdXm0d9xx%2B%2FhFFTO3LdChNgNAWuxeJqTWOpTvwQ76z0uf%2BhBZPkT88H38yNdJBU1CsiFfOrETYbaWdYXSBDXm4xM4Axzuhh6MwwL22%2ByQQlMvvanqd5K6h\"}]}\r\ncf-ray: 9f4eb44d8a6b5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useActivity-0c97d58c.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/useActivity-0c97d58c.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-480\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wRe5%2Bla3HQOjjzgfwGQ5IEuIBqucjtSR7e3HA2xZEO0xXNpiYM395ayTb0C1DbYDaBMByq%2BrdJ93dBpsF7JcMhyfkd%2BOwUw4QhK7WrazakygiKwrs0ofBEWwkRaXwgOi5mU%3D\"}]}\r\ncf-ray: 9f4eb4510aa65699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1152,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1151)","md5":"a5d1ad961a3ad282960d430c98ce7019","sha1":"d9aae00363f37adeb372dba998db069b1ba678a3","sha256":"accde18ea64d70c568a9be92216cf6aac3a9ca122d6ec4afb3d07f5d6c3a1afe","sha512":"cd3bbeb01377d87785c11637aa4f4b36d5d77172cde7754cef7e7b2003f832e38a3791082dd1c90a0e9cb0e80c5f36ca033c703181cb5b1e8ccfdd551558e490","ssdeep":"","tlshash":"1a21339ab01df37950ef089a1825540311492bd4a325c4a8b7a50c4e13d7af9c67664f","first_seen":"2026-04-28T02:33:41.682599Z","last_seen":"2026-05-01T13:58:35.315911Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/danche-5acd014e.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/danche-5acd014e.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TKu6aZkbKdx%2BzpIJh9%2F8M4c72mIi%2BFdRQy4mplLTa7u%2B9UmdtE7s9dOODyo34h7QXLuPL597OAIJBNJh9rASNhSC10sL9iu5dAGfjBc2rmknBC5DHHVY9ZPF%2B6FG18U6PAg%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-3d4\"\r\ncf-ray: 9f4eb4526ac05699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":980,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (979)","md5":"e76485cf82c36e5eda8afffd1433cd4c","sha1":"6429e127f292e66ff78079815eb972fb7a8ddbcd","sha256":"dcf650a5c619bd8786e7f50f6f7a7b003b549e25e97dccde0da212d4d1894498","sha512":"2ebbf8a67261fa5e74b8ee38b3bda3a1a02be115e17cbd7364fd6b5049027ce334c4388214e67b46423e74b212ccddbcfc63dceca1f117dc9a1acae9092a207d","ssdeep":"","tlshash":"7311106f780376f0fab01c602a66805322144b8bcb2fe2c5b2bd0e41a796d307b25635","first_seen":"2026-04-28T02:33:41.736306Z","last_seen":"2026-05-01T13:58:35.298112Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/route-block-83d24a4e.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/route-block-83d24a4e.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27\r\nlast-modified: Wed, 24 Sep 2025 08:42:59 GMT\r\npriority: u=3,i=?0\r\netag: \"68d3af13-1b\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17mJiza2rqHiSY%2BAOrURfFYLi3hK5u3CbalXFkGGtl0T9EePy%2BjVsY3%2Bgl613RbaWOCoLBfuSVtS0t6ZnWRhDzEgsFZwhNyCzUzMT9%2FSg9Mc%2FHaCemujJyM7WjXl71oXhvA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4528acb5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-05-01T13:58:35.287024Z","times_seen":646,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e71f988e80.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e71f988e80.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18978\r\nlast-modified: Tue, 21 Apr 2026 06:56:24 GMT\r\npriority: u=4,i=?0\r\netag: \"69e71f98-4a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQb7YRqvU2p9zONuGSkwgGBHGBESbm8VrW7VNIX34qhLmIKj2PBUQInPYMRQFJGVh2VPuAPKiL7Jr%2FbBKrByTUMEmgu6Dv646vI8k0Qdv6zIAOj4yyUkLc8lHU0F505zHaH26LXU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4536add5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4ff778660712b0683d34ae42bc1d5c","sha1":"05265637e3fcba97e8fecdce8450ccd54dd1b9ac","sha256":"92bfc815f955ee275b0f94ab0aa54742a068b5e2b227bfdc6b4cefa5c81997b6","sha512":"689ce8a04406e551fe1f6e5e2875db48827ff9d0a1a86a3d96d6f077a5b94b88071d38d9aa797ada8dff8bf9a4040db043a979539b7e8564e3f3d3f8a5575863","ssdeep":"384:A4Yibri2tmmqi55lB7Oppn3B03Pud/+FWdTU3j:A4hbrXtmmqo/OpVu3PuUI9Oj","tlshash":"ba82d0db1069f8bb8111ee36724bf49bf53c07d076ef81142785b98d8208da5f796638","first_seen":"2026-04-28T02:33:41.649603Z","last_seen":"2026-05-01T13:58:35.293415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e7245697c4.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e7245697c4.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18978\r\nlast-modified: Tue, 21 Apr 2026 07:16:38 GMT\r\npriority: u=4,i=?0\r\netag: \"69e72456-4a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mdrwq7zUTH5PZg9c%2FYSQ9IsKosgSZQ5IUe2lhg5Nk1nhjlut2B5jtEEIeZYCCCjiAMWxYg14tn4fhYXYnf38ywoqvEwJtIb%2FAGK2FQPBMv4oje6eCAxS0TpS8cy3vG9WyKXCYwYt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4536adf5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4ff778660712b0683d34ae42bc1d5c","sha1":"05265637e3fcba97e8fecdce8450ccd54dd1b9ac","sha256":"92bfc815f955ee275b0f94ab0aa54742a068b5e2b227bfdc6b4cefa5c81997b6","sha512":"689ce8a04406e551fe1f6e5e2875db48827ff9d0a1a86a3d96d6f077a5b94b88071d38d9aa797ada8dff8bf9a4040db043a979539b7e8564e3f3d3f8a5575863","ssdeep":"384:A4Yibri2tmmqi55lB7Oppn3B03Pud/+FWdTU3j:A4hbrXtmmqo/OpVu3PuUI9Oj","tlshash":"ba82d0db1069f8bb8111ee36724bf49bf53c07d076ef81142785b98d8208da5f796638","first_seen":"2026-04-28T02:33:41.649603Z","last_seen":"2026-05-01T13:58:35.293415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/index-795bbaea.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:07.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/index-795bbaea.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-15a8ed\"\r\nexpires: Sat, 02 May 2026 00:13:14 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bwovJHYbz6%2FQv%2FOZknIuS6Byk9KR7ee0dWMWaXar6FHc%2BaG3J5WHJ5lOGny0bcplrFr0Tk6YbwGREY6GrLyTD%2B0jO%2BYb%2FMVJ3suO22%2F0LnhT5PQs5zOJZfy4qXwk9vzfZ1I%3D\"}]}\r\ncf-ray: 9f4eb44229ca5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1419501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18617)","md5":"6936b908f6c0db592e6eb2e0d9865319","sha1":"b426bd00ae0984f309661229b63fae23f303a50c","sha256":"1ce6a1f5f776159324cc084eb8d2d3f4f540979d3040d6748e2b5844c83605e9","sha512":"27bb6f3e944ffed68e9315b8f59ac80ca62cb603487873aceb14f07a671aaae39950f363f4a53203e26e083f80e3f105c62198850cfb259a0fc791acd950597b","ssdeep":"6144:pW3shb2Q8pRIKTgdULpzPpp5a0R0I/Ekt6Iw9Fe6L1repyMo2g:pV12Q8pRIKTgdULpzxS0BEkCe6apVo2g","tlshash":"042528282a6bf344a419c0dbfa373c84c59de18aa40b64d15f7547b31bb2753eaacd13","first_seen":"2026-04-21T13:48:47.893737Z","last_seen":"2026-05-01T13:58:35.313421Z","times_seen":6,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usd.com/upload/img/69e725eaa0ce.webp","fqdn":"api.binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /upload/img/69e725eaa0ce.webp HTTP/1.1\r\nHost: api.binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18978\r\nlast-modified: Tue, 21 Apr 2026 07:23:22 GMT\r\npriority: u=4,i=?0\r\netag: \"69e725ea-4a22\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BcV5UaxmgO1vD586kUXEws0citB54A9LQlrl0qplivnfTwsPccKGnH7ulzxoVe0BvQ3TbnYPccn%2FeFITpWQmyc1TVkk9vg0XZNjghfmqRKkGH68OzwuvHJ6WTv2Vt4LCfBPrHIFF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4eb4537ae75699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 445x445, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a4ff778660712b0683d34ae42bc1d5c","sha1":"05265637e3fcba97e8fecdce8450ccd54dd1b9ac","sha256":"92bfc815f955ee275b0f94ab0aa54742a068b5e2b227bfdc6b4cefa5c81997b6","sha512":"689ce8a04406e551fe1f6e5e2875db48827ff9d0a1a86a3d96d6f077a5b94b88071d38d9aa797ada8dff8bf9a4040db043a979539b7e8564e3f3d3f8a5575863","ssdeep":"384:A4Yibri2tmmqi55lB7Oppn3B03Pud/+FWdTU3j:A4hbrXtmmqo/OpVu3PuUI9Oj","tlshash":"ba82d0db1069f8bb8111ee36724bf49bf53c07d076ef81142785b98d8208da5f796638","first_seen":"2026-04-28T02:33:41.649603Z","last_seen":"2026-05-01T13:58:35.293415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"api.binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-vendors.6ef765fa.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/chunk-vendors.6ef765fa.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Thu, 30 Apr 2026 13:39:03 GMT\r\nx-oss-server-time: 9\r\ncontent-encoding: gzip\r\nx-oss-request-id: 69F35B7788D14B3739922F8E\r\nlast-modified: Tue, 28 Apr 2026 12:27:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16184782789754269720\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: jniEYbqRWty/z6mxDDXyZQ==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0ca3a24436a7d86916b35130b21285a8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: tAG0z6_qqXv5bkRPwHvJcnt_U17l2nmLagDN0mZfStjtajWtHU19Bg==\r\nage: 81307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":214670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"8e788461ba915adcbfcfa9b10c35f265","sha1":"bc3841eff0c3841cfdef9a2f1e1b5f1d0dd6c26e","sha256":"69ced1151fb1b32d26c8b70739681828a1d99333c4a08114c98cd8af90b3f2ca","sha512":"b20ea5f22352ee329e6982d0fbd14fa2f4607a186b2d2973a99e43975164b2c6142b8ce87f7d5f54f47cb41bd6a33329ec3d09fafcb971de6e316ce5c0c8cfe0","ssdeep":"3072:gZcGj+j4Cm4m5BJ1IWqq/1cuC+4DdC58+skrMJz+8:gG27J1Wycu+4ikrMB","tlshash":"1424f7cdbb92f06843a335a4806f150bf17b6a18f40e81d4e6a6d5d1ac78a8e5137f3d","first_seen":"2025-12-10T08:58:23.267899Z","last_seen":"2026-05-01T13:58:35.331763Z","times_seen":847,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/autoplay-01e26a3a.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/autoplay-01e26a3a.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-144b9\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g70mgnxPGad71rOoMMZ2o%2BO1VZVTj2ndnQOYPkKK389S5fAEXUW3pp984wISRJtbmTAI0k5oyVVqZ5afbICvlf4MR1XvnjOJDCZayjqHypIgjNa8DeJtRP0UEXLGK0piUJY%3D\"}]}\r\ncf-ray: 9f4eb450faa35699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83129,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"25fe6bc9b92d38094fc299a7858cf09c","sha1":"6e6737941e6629350f0c48ef858f913e152b7e80","sha256":"c0e2ec1f211c32008e93e39a3192426801aea5853fa75d66fd64dc4c8a8377e5","sha512":"42d33fc17872316218d26e2b8724e58c048999a5881b42c6cfa5eff9abc1fa423a001496f806369055b9ac446251c1277a7689692fc89763052f1ff0c3cd54d8","ssdeep":"1536:WfA+DqolxUdfGB+TLsUimRCsdRPQhj9rjzVPeXV/wTmBrvl9V:+x8RPQhjPIp1","tlshash":"45831a89b224b17706f75a8b82b5c21172b44948f805d4e4b1fd5dbb486e98813feff8","first_seen":"2026-04-28T02:33:41.882806Z","last_seen":"2026-05-01T13:58:35.319086Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useActivity-0c97d58c.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/useActivity-0c97d58c.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-480\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yXkcAhpBzqwY316NW88lW%2BMjKnEHWEm3WRSu1iHxEsMt7wa%2FEfBkYMfqNn6Hd3Aq7M%2FZnCDRmu0ny4prsKK19uivFWZPgmFGJxwYnRn1Di%2FAOKE4kIA6VbuIv78GZR6wf%2FM%3D\"}]}\r\ncf-ray: 9f4eb4527ac55699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1152,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1151)","md5":"a5d1ad961a3ad282960d430c98ce7019","sha1":"d9aae00363f37adeb372dba998db069b1ba678a3","sha256":"accde18ea64d70c568a9be92216cf6aac3a9ca122d6ec4afb3d07f5d6c3a1afe","sha512":"cd3bbeb01377d87785c11637aa4f4b36d5d77172cde7754cef7e7b2003f832e38a3791082dd1c90a0e9cb0e80c5f36ca033c703181cb5b1e8ccfdd551558e490","ssdeep":"","tlshash":"1a21339ab01df37950ef089a1825540311492bd4a325c4a8b7a50c4e13d7af9c67664f","first_seen":"2026-04-28T02:33:41.682599Z","last_seen":"2026-05-01T13:58:35.315911Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Thu, 30 Apr 2026 13:39:03 GMT\r\nx-oss-server-time: 4\r\ncontent-encoding: gzip\r\nx-oss-request-id: 69F35B7793460A3435A6CF85\r\nlast-modified: Tue, 28 Apr 2026 12:27:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5637137639894394577\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: OJ1293fCCkxOgEsVvVUOnQ==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0ca3a24436a7d86916b35130b21285a8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: IuruT6JrJG5MwLf3wJSAyaHttDz7YbTV408kBSoMtpyr7JSImlTbbw==\r\nage: 81307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1589,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1589), with no line terminators","md5":"389d76f777c20a4c4e804b15bd550e9d","sha1":"4ba553f5d41d1562096c002a8f60dadd81f2de0a","sha256":"a82568b572a52dd3a859fcb35af1737ee747085a05b6db4cfa7ecf72b14e07aa","sha512":"3427ef42985a72a5de2e8857b0d35f267aaa29201c3a3f98dfb50b8c8542f4d9dd271f32a3b1fcb82fe10c257d3ea5b8909fbd74af4da1085a85f19c61e428bc","ssdeep":"","tlshash":"ce31449436e5f8a153d76568013f8049f3aa0865187df4e0d3a9cdb97d38c8d40a3f5a","first_seen":"2026-04-28T13:21:41.181728Z","last_seen":"2026-05-01T13:58:35.285963Z","times_seen":46,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/tabbar-5-1-88ebdc42.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/tabbar-5-1-88ebdc42.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/tabbar-4ecd2a86.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Sep 2025 08:42:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68d3af13-109bf\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J8wHcidRSi%2BD7RMO1zC5XMs327LL2pJjPucXNnMdcU6wrwl%2F3fAWK1hhJ7YP3c%2F0sKZYxjciSHm0HL7DcP2UVc8y6U3QUZNsUhSVBJ%2BiVQDM9CZa225owLgl4ZrYHtQWk1s%3D\"}]}\r\ncf-ray: 9f4eb451eab75699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68031,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6f426d1d419eb7c29b054c7ba217aaa8","sha1":"88a040864ff5fcc97b874157809a9d1a5ccb4da3","sha256":"12f422d1f0ff02d2dcd3de682631b23ec56050ff895881306df19ae0003b21cb","sha512":"02407a19a3d1082c613e585050beab002f06f4e6b0bdf47e8b1c2aa45780b00974731190a801308f803a1ea9866d06447fcd72dba7048b9bcef755a1fa1b2959","ssdeep":"768:uVxpvoZ8USsO3E2443m5upG1CrMG/O3LYNTw9Hn9LxpvoZ2UssOWE2143m5upGKz:usO3E29Aj1hOT4n1sOWE24AjK5DT4n3S","tlshash":"6663e07631195ebfaee18862f20a0205cdb1169b530ef299cb94b2b754dd721ec1bcf4","first_seen":"2025-07-12T13:57:48.771979Z","last_seen":"2026-05-01T13:58:35.289278Z","times_seen":119,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=7e529003e858674eb0efe05f9ea0eecc\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637652425\u0026_lt=2dfb313f9973416248758b4c448585f5\u0026_u=61ddbdc777c7b496af8e8d1c75858381\u0026_xma_=392765","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:12.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 12:46:38 GMT","end":"Sun, 14 Jun 2026 13:46:34 GMT"},"fingerprint":{"sha1":"4C:14:A3:50:BC:B3:C2:AC:E9:F6:88:D4:36:B2:E6:AE:E0:D4:64:D3","sha256":"C9:AF:D2:80:FE:11:04:07:0D:92:35:3A:19:79:9F:31:89:4A:2E:34:36:0F:DC:BD:33:1A:A8:E2:82:15:41:42"}}},"request":{"raw":"POST /client/station/log?plugin_sign=7e529003e858674eb0efe05f9ea0eecc\u0026plugin_id=gx4seh\u0026over_time=\u0026env=chat\u0026_=1777637652425\u0026_lt=2dfb313f9973416248758b4c448585f5\u0026_u=61ddbdc777c7b496af8e8d1c75858381\u0026_xma_=392765 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 511\r\nOrigin: https://binance-usd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: ss_uid=61ddbdc777c7b496af8e8d1c75858381\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":511,"data":"data=0qHafQ8hMhHKtTc8f5KWB9HEPQu%2Fs9DwtNIvBQIWPCFABqypyQcWPnuEPhyiyQHEPQu%2Fs9DwtNIvBQIWPCypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6hBdHqrnshMhyhBdHpsnmGyAKhrnkwXXlhBdHA13u4NSX5rNHb1nohMhH%2BInXQM2O4sAlms9cAleuQIAfSI2r%2BlQymM2fklnOjrdypyGYptntEPVzErdyiyQtkITIV1dypyQuAt3VWPhyiyGY%2Br9Xn1nXSyh8ht3zZrnkhMhyqr3rhl5O5rAvmI5l4l2sqIeRSI2%2BhI3l4IeRaMeXQICypyGXErdyiyAsjr3chr3lSI5tAI9y4M2r%2BrA%2BVM3ojs5faMeDkl5RjyG4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 12:14:12 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://binance-usd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4eb45fbd18569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"41a9ed6ac9ccd6bc0c1afc92507e9f5e","sha1":"c10a69ac325b842f2bfdafa267a7a63de09ddd85","sha256":"cf12f496000db5f05e99b6728462606915119a19c62e78e4d44cdddc2ae9b133","sha512":"24a914c56371aa87ac7469e0d97b9fcdf197101b84bea571ee33a7a6c4c257fbbb18508636d263063007826f304782aab74a338c7f12335d4a5f447f6ac21a53","ssdeep":"","tlshash":"28b012222029132b0e04d40e980626645070500049104709c8fc8a64935d8467142dd0","first_seen":"2026-05-01T12:14:39.539628Z","last_seen":"2026-05-01T12:14:39.539628Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useHome-e6e4444c.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/useHome-e6e4444c.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-d85\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=35JDYLcxJEOtzjNeQGWpGdj22D%2FQTsFfvt%2BMpho%2BaH%2F3QaWZlYoCtdDKris1TCQNFjjIU5EdlX59SZxGNy%2BbulNxxhNBq3%2FbQZGpUfFF7BTk%2Bq%2BW42DRzibXxv2YigljKS0%3D\"}]}\r\ncf-ray: 9f4eb450ca9b5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3461,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3460)","md5":"f960a8785dc5ef3e261d9f0b128ea265","sha1":"6da2c63323e444389083cfaefc248d60a69ae9ef","sha256":"1b48ec90c657395e0921bb86a855ea70a079127f9238d2e17388a66d8af85f8f","sha512":"0eaf2b11554a32b2f25fdff3a2970337bc329d20dff8c5be7409f2cb96265a7b319de408bec6cb8e5767a345fcbc7ef145b39c4d0adc8b439ec626d018c48ecf","ssdeep":"","tlshash":"a6618348b3b38078c7b919b016e90a01603eeb19dc57e0cdb1a30555577bfe6b8dcea9","first_seen":"2026-04-21T13:48:47.852231Z","last_seen":"2026-05-01T13:58:35.302722Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/index-c6f4ea70.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/index-c6f4ea70.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-a7b3a\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1lVMOZAnEz7oTKO8bS7jdd%2FiwZATAj83tYJUO5LK3FPTEc5YbShcsLUilMLisw4fqKnfVcrM7RJuvQcAXbMwlw0W9SMn7WbuxgzbSvBEDwtklkOPfzSD1pRMuJqHpaaJ5TY%3D\"}]}\r\ncf-ray: 9f4eb450ca9c5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":686906,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"b7150983d5d85e447e3096f683c2d6db","sha1":"ebf2db10ddeed80e27cc0447f9707b953c3ca4fb","sha256":"388d5bbcc40e403eee741b355d3c737f9349d859319169080abdfa4725d36d80","sha512":"d8045b0388f0e2750be845e00c7f9d1224f35efd0d88ad28a8df7e7a08eafe36cdca0d17cdb4556b6a590246972f690b7972ebce792cf4452b2baa46c24cf252","ssdeep":"6144:DG6T9i1XYK2MbqEVdnw76I0BerpqgVAeSpV9fNcX/ZT+esEJuXG79SY0nbWozYx8:y642MbqEVdcUp/Ear7","tlshash":"3ce4f656e216eb3cf9bb92a4d199185072992febc0508165f1fc0d674be2cbc2b0c779","first_seen":"2026-04-28T02:33:41.704707Z","last_seen":"2026-05-01T13:58:35.292123Z","times_seen":5,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-a148c833.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/BaseMainBtn.vue_vue_type_style_index_0_lang-a148c833.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IbUQcrc%2BOU7Okoze%2BK4eSvx%2FMWcs%2FtkiyB8%2Bf79oJsnMCXyTkOSgU7qzm%2FHgP6uNBtd1Pgrx3ElZL%2FVFQuPhPC0nXUZpoXNuAy97yT2Axzm5eaUfXJe3sv9PheEzGDUqzio%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-22c\"\r\ncf-ray: 9f4eb450faa45699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (555)","md5":"4f2f5af9f445cbb2b3625edede115a8e","sha1":"e0beb65b419b888fa1ee4956b2837b8aa426c408","sha256":"35d0f9305a050a0f739a0f3684a883702fb5b621a83a0161a676cca223092a40","sha512":"a7d598640e1786258e4d1b948e40dc558580c358eca7de068ad7383969483d81f3fbedac5c16d53479a028ba3fa4fe27d47fdd93461091cba01fe44c96c2f883","ssdeep":"","tlshash":"f9f075096c06c5bc2c82050d2a8520109104377fe32464fca6df213ca79f4f9783932c","first_seen":"2026-04-21T13:48:47.860855Z","last_seen":"2026-05-01T13:58:35.294277Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/NavBar.vue_vue_type_style_index_0_lang-39e21835.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/NavBar.vue_vue_type_style_index_0_lang-39e21835.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/tabbar-4ecd2a86.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-60fd\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4UxfJz7LXktSoRV5fCPjXIY311DUBMt2A8S0P7Sghpfw%2FF3DOBCw1%2B3Ts3wA9Bi9HwDM5uFYKyLOAkSqHd2NUqCgAPxCh3n5FlIWPAg7lHKAv3eAeKo2bZnoz9GF9uS7ml8%3D\"}]}\r\ncf-ray: 9f4eb451fab85699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24829,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (24828)","md5":"2121a2fe8c2393d5b240dd2bb3c218a7","sha1":"72674b199c8749d3169b21835db06a4f8899b34f","sha256":"2b029e1d7f128d11d6c997a91795dd8667d9c5dcde551be06f59323c5b219ac1","sha512":"0b07dea1cf3879c3db7234f1316b14d61a73ed2e4da6713380fa3f3e68f6caf941f20eca2fd88fb3e2630b9c78140950e214aaa67e387613ba93b3e3103776ab","ssdeep":"384:/bB+piye6YLVu5KtxyXKBP3gC6vhX6KSaHnUw9u/4uj2:/EvewrR957+/J6","tlshash":"29b23140e525cb7ccab623398e866444b24c5fced149a995f1fd282b37dacf47118bac","first_seen":"2026-04-21T13:48:47.877894Z","last_seen":"2026-05-01T13:58:35.31093Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useArticle-5f65cd74.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/useArticle-5f65cd74.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwvMxWpuhN8MlYuWkMLSMY95oON%2F%2B1h4ezNDZtD4GS2CEWbPDAc18FYHb90SlT5zM%2BuLANoUjClGA8%2BF7x%2BXYcdwXMSqTqa1CJ9VALGJ8EidP4b8HrSQgWI1ZX%2BYsGt64eA%3D\"}]}\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"69e711d5-268\"\r\ncf-ray: 9f4eb4527ac65699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":616,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (615)","md5":"bcb7f626fba16f4603d111c62b7d5ff6","sha1":"cb21b3cd026a4f356d449c5f63cfb162018927e0","sha256":"e34f0abad83baa33ea3cdabc39013b3c69a5ce419825c6d8948ce62083dfc61f","sha512":"a729e5b4b18bade9bc1a322a450d47db29f1d4e68b37b4784ed7209e37b615ef1bd258517105d2ff280e730145dd6eaea18e181339eb52b33f27d7d4d647eb03","ssdeep":"","tlshash":"5bf00274705c97b892767cb08879204c02712b00f90250c0270e9f5c19b66569271f4c","first_seen":"2026-04-28T02:33:41.662276Z","last_seen":"2026-05-01T13:58:35.300514Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/Task-635f1657.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/Task-635f1657.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-403b\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BZlNFmGm7u0gNY28C8i0m8po6m6OfKdiyTlceoA8T6BYZC8A4%2FqynrdqI%2FWLqaNWCGwvYJk4ZhJshtgTA0KOko8geSYeAGyXJ874idPUbzxm170y8ETlRFxDuKBW8JQsPik%3D\"}]}\r\ncf-ray: 9f4eb4528acc5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16443,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16442)","md5":"8e3ef7234d5071e2259af49bf608da2b","sha1":"8a81f409dea65bbe8ff7fe89bfbe3d7ca24d8e33","sha256":"e952751d027d1a734a75df5b2bd4077383faa158064f7c11c91cb7b8f596c5d4","sha512":"242de3c701ea060ef33b637f7777cb173e2f6a0dfcaf2376a93381725917ac115bff28b21af5f2245ea03b4fb7afa3801d7847c85839e9239fb719f93995f793","ssdeep":"384:OUJN/R4/oGo+We+UVJa5+Uptl0Y+UK1jN+U7hL++Uz:OMN2oGo+We+UVJa5+Uptl0Y+UK1jN+Us","tlshash":"9672ed06e807e2acf1f6b48465dc581462f42edbd228c407b5f8653623c69f0a79ef79","first_seen":"2026-04-28T02:33:41.889281Z","last_seen":"2026-05-01T13:58:35.296168Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/index-f2cd864e.css","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:07.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/index-f2cd864e.css HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-1145a6\"\r\nexpires: Sat, 02 May 2026 00:13:14 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tEWWgQc%2FmOV3SPOCivPRipfPRvpR5w9twH26WIb%2BtUM3PcPYoEILUOAr79pr5jFHNKYFROSGp6rksSkaLidZIBRXdKDOkHMy5B5mbPc2Dh9UA7KI7%2FB68BL9xVESd5yq%2Fq0%3D\"}]}\r\ncf-ray: 9f4eb44229cb5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1131942,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"43b40730139c3660d496bf52a87b4986","sha1":"1de6bce37236a0e98e965f908160d752f2ed91fa","sha256":"c2af81a2160157dccaaf4f50e77062451d97adb2a88f38e647603fff0a60dd7b","sha512":"61d0b5cea6c660f0e86f26565932da71ea837cc13653e0428a727d1aef1bf9eda9458026a7de059ffa41497b060a275da3b704d7e418ab9c4d68edbb3e1167ec","ssdeep":"12288:Pn1mPnTIaQxOOwaegeLuRNNcD55TSS12FhKR7htucwesKzN8vFs:Pn1oTIbOfLocD55TSS12FhKR7htucwi","tlshash":"01254bb86f8451befd0bcf7a4728958c691ef092ef424a845619f63043d73a77623278","first_seen":"2026-04-21T13:48:47.871849Z","last_seen":"2026-05-01T13:58:35.322292Z","times_seen":6,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/index-ca70c2e9.css","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/index-ca70c2e9.css HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-9f310\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=617vCGV4ulbMCNnmX3ia%2FsV1zcxS1cwRxYPqpknMt%2FehrqZ%2BdwY15EiqX20aOhoNGd%2F8pCT5MmFSTlObV%2B1LYEKKhnZVXnSrJg4oBrlic%2F20dH%2B1K4yvAssRlPbI3srLXqE%3D\"}]}\r\ncf-ray: 9f4eb450aa965699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":652048,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"25450465de4304758463d776a19366b8","sha1":"de8ab114e5b7e93f7ded8f5d824643eaa2b0222b","sha256":"ca70c2e970300260b28498a7a706400d2c5782814791bcfec3b76e685bc723b7","sha512":"b87346df56d148b49b41d6a78384cdea4de43fcdb8d1eb88750e68eec5440e78b200d785c79845288b4efe12468eea79ab73904c40dd9a5e92e7114bdd71dee1","ssdeep":"6144:Ew9UTESDEH18KqIV/464bQz39UzLIAQrUTQ68K/0O60ySrZO/eH1hRXAt+BN7c:Ewi6+d89ELMUTnpJs","tlshash":"fbd4e5b43544663bbdb7e124766c1ecd2d16a103d523c29ce676342dccefae32a6e148","first_seen":"2026-04-28T02:33:41.774169Z","last_seen":"2026-05-01T13:58:35.307665Z","times_seen":5,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/useFriendsCircle-c0118cfa.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/useFriendsCircle-c0118cfa.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-ab0\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tjtA9iYhn0nL%2FnkO9UIDbuh2hhc%2BzxMGOteD5nIEKFsnqtBIUCJvIT1rXq2Q5lgIOAnnhz%2F3Gho5BEAuhpBRHOIO2Yri3VuxmB4j7spvOL63K1P%2BQ5qb3Z1ebmuoqRE5EQE%3D\"}]}\r\ncf-ray: 9f4eb4528ac75699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2736,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2735)","md5":"4e48229fe68a6127e23d0ba0342d8fd1","sha1":"cf235710c7e6a1320a45fe883216fa274ee6010d","sha256":"9a2aefd0706fd66954ca944b49bb2cdd5ca6f45fd6d3fdf55a04a819055a3a66","sha512":"e888ef446ab622f011333eb14c0a3a70cec6913d92450bb63ce6d3e16d78fe6a2465b1aa2b6a4c148d7a66ae4fe38bdb912cbb79ebf741d7c1f6c05fe7afa5ee","ssdeep":"","tlshash":"4351b67236b226ead3b330b9e13650159aa92f943d16d1d1b11d0f058a7cc12d9bff28","first_seen":"2026-04-28T02:33:41.665972Z","last_seen":"2026-05-01T13:58:35.315324Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usd.com/assets/Rank.vue_vue_type_script_setup_true_lang-7bfe15c6.js","fqdn":"binance-usd.com","domain":"binance-usd.com","tld":"com"},"ip":{"addr":"104.21.58.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usd.com/","date":"2026-05-01T12:14:10.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usd.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 05:03:28 GMT","end":"Mon, 20 Jul 2026 05:03:27 GMT"},"fingerprint":{"sha1":"58:3C:6F:55:DF:E3:2B:A2:4D:71:C1:DF:8B:A2:16:52:F6:BD:FB:7C","sha256":"C6:60:9D:7B:FA:10:FD:9B:DE:62:69:2D:40:7C:A3:E2:5C:B9:41:DF:0C:EA:1A:85:CF:56:58:0A:B9:22:63:F9"}}},"request":{"raw":"GET /assets/Rank.vue_vue_type_script_setup_true_lang-7bfe15c6.js HTTP/1.1\r\nHost: binance-usd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usd.com/assets/index-c6f4ea70.js\r\nCookie: _scid=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba; _scid_r=a10p5DaI2fg0M0rUhL-lsV1i5WkmOwba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 12:14:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e711d5-1a3c\"\r\nexpires: Sat, 02 May 2026 00:13:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 52\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJapst1XspKhrafpUlUyI%2BkpIysrTvCzIapxm%2BH2VwZTk7WtxU%2Bx316bTES7HaSyehE7n3oORC6%2F5H%2FmgT7zxtLi6t1tdJp%2F86c637e8TbXn97dDOxW%2BxWK7Oz9pUaEjvIo%3D\"}]}\r\ncf-ray: 9f4eb4528aca5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6716,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6715)","md5":"d0d533474972d66ec7bd908046c84bb2","sha1":"e3b86cb5221c82b6465cb8fd90557634db03e147","sha256":"c97643f6277c1f377d72fdaebb1b525fadfb757ce9b37e597c8cb5778f53a8f5","sha512":"083f500042d5b275db9253481740d192f5f868d1ee5d992a95002388e12c224cd16604f3cc65e577067eae6d28f22ef7586fb69f394adfe1dbe1d7cfa6c25e08","ssdeep":"192:ISXddUAIpf/n47rsTBuXb76sVLQYe/mwCZmKDkk/3Ic:IS+6eCZiOF","tlshash":"60d1ff516025cabce4f36165b58a9921b184ffc7c167c406f1fd28032beac75979cbac","first_seen":"2026-04-28T02:33:41.807718Z","last_seen":"2026-05-01T13:58:35.327528Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"binance-usd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}