{"report_id":"f6c1dc1d-423f-4d39-9d0f-3dc4aef69253","version":0,"status":"done","tags":[],"date":"2026-09-04T16:33:14Z","url":{"schema":"http","addr":"ebgxqo.cc/","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"172.67.145.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ebgxqo.cc/#/no-wallet","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"title":"ebgxqo.cc/","dom":{"size":136,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"24276b02466ffc30fc1790426902dfe9","sha1":"1e98c473a0817ffec2876df13e8c58d81f65c534","sha256":"a37abcd4c1096f4e992810c9a8f96f6f28ee2fbd7ce34c4bdb649ca44083a100","sha512":"e863d13eee7f90f5126a9ffa9bd057c8fce8258b2087c5b1bd818d679bc48bfc72d3c1c4ceaad57799e4b70a6860f414aeacff09a26b303081434d6268b00fcc","ssdeep":"","tlshash":"a1c02bb71004140bf22035c9d8822104b4844004e02a0c10f740012cc2e120c8099a84","dom_hash":"domhashc1fec9cafeadbac0b33c1409ff211c3f","first_seen":"2025-10-27T04:49:15.24313Z","last_seen":"2026-09-04T16:58:43.02238Z","times_seen":111,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ebgxqo.cc/","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"172.67.145.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T16:33:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ebgxqo.cc","ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":16,"received_data":2788648,"sent_data":7843,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"kf.dl237x.com","ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"domain_registered":"2023-12-07","domain_rank":0,"first_seen":"2024-10-10T16:05:20Z","last_seen":"2026-09-04T15:49:33.296985Z","alert_count":0,"request_count":2,"received_data":28410,"sent_data":984,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ebgxqo.cc/#/no-wallet","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3b8169908f63877e8e60a39198f276ad","sha1":"c168a52fac932c30ce26c29354094eb425561757","sha256":"e4ef5cf4ec0d569c9f0e48a159f32fb1b0db370020139adba6a80ea708200830","sha512":"0ccb1f75e1f25c2fed565176bbd9e0f2a216bd3b2e2df3f161a3aca8ba607ad435353e94382ba33db3d13c24f42c57a87299e3e45c68e6a3ed88adbe83d10cea","ssdeep":"","tlshash":"47c08cc9a1c22e006602651155bf35f4a024402a71481b178ee4d8982f230f88233ed8","size":156,"data":"","first_seen":"2025-04-13T20:28:04.833363Z","last_seen":"2026-09-04T16:33:35.33438Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"adeb372115c69c6f555d4c10771af21b","sha1":"06273ae1c389c14a50e0ed18626e90216d68efbf","sha256":"0d1362a6afd5c1c1d18ce30f126221e8b7aa42f3c9692947ffb9308375652071","sha512":"04d6eb14dc6cc0af7c249ac00e8a64c5ecea19f597b9d2381a7bc8726771ff15246872dfeb98426e25589a188a35f9a2eaab285a4e11e40ada9ac40ffd0dc681","ssdeep":"","tlshash":"1211abfe192a602d6303404e976b7811642260a9000a184173ccde9dbb9af6dd0cfb8c","size":1034,"data":"","first_seen":"2026-09-04T16:33:35.335812Z","last_seen":"2026-09-04T16:33:35.335812Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-09-04T18:19:42.160014Z","times_seen":42271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-09-04T18:19:42.161906Z","times_seen":43655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/assets/index-39cee697.js","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5e67e4b569aa4e11d91440ca641dfe9","sha1":"ebab74c6cf3dc5cdb05f1c80fd1c62b9d53c395b","sha256":"817ecef166f480c9a6262e82bebff894e112409e6195c71821f1f69ef27440fa","sha512":"92991c07125a6a0064251cf39262c33b44820bafdc76ff4f69d2553dcb4be73f23027ebf3840b3428132809bb310f88b43f24091037a084d0dc173be893b9e8d","ssdeep":"1536:K+FJhtt+Uvi8tLQRm4jDExMkn2hBiuMv3ms6CeowwE9upHjmv4MrbT:KEJjtxi8tLQrs7a9Mv3ms6CeohufrbT","tlshash":"d1c33bc9f50a4fff6cf94c14aa59001021981fd7a98ccce3f7e96e5627bacd4224ab15","size":127043,"data":"","first_seen":"2026-09-04T16:33:35.320468Z","last_seen":"2026-09-04T16:33:35.320468Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/#/no-wallet","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-09-04T16:58:43.086983Z","times_seen":1774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/#/no-wallet","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a12beb8c3bea6886db7346b336af5549","sha1":"d816d03c631617eb32b27baac48feb2c2495ced9","sha256":"a4d1b2dbfcfa038ac5b5e980ea2f3fdc31948863bfca2849320183410f831fc4","sha512":"0ac7131f62c6f4834a04a8f1824d28bbc3f95975bdf2d1b90b026db770f6320d735e910aced8d25ce7ce198de07b5af06c957855d3b8f62ccba1cca16810658b","ssdeep":"","tlshash":"d6c08cc4a0c22d001642691014af28e4d024a026b0485b168c98dc892e630b09237ea8","size":142,"data":"","first_seen":"2025-04-13T20:28:04.827015Z","last_seen":"2026-09-04T16:33:35.340079Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/packs/js/sdk.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"introduction_type":"scriptElement","is_inline":false,"md5":"f77d2cbbbd7542ce7bfc84f21c4fc25e","sha1":"7c4abd866399c53c13b9b7c752d57e836540d0e1","sha256":"e03b3e1555b0e19bb14a3f7563504d8f4bb1580346749132e2d7a0f2447cbd4f","sha512":"bdba42f3b42ce2d4eeb3d0b97fd73a7d08c315c22b588cab81065e910f73c2b659f0b26ebfbca9495dcba10196f2d106b9e5a225a98d56c0d2613cd89fb00a2a","ssdeep":"768:6464XK0h0i04Y0t0Z09af7evYvMBG0iKTpQRtAtjF060EfufYJuT1GqFxMzWPsUQ:vRK0h0i0z0t0Z09af7evYvMBG0iKTpQa","tlshash":"5dc2fad16291797407654ecb27a7b718b33850b5f14acce0e5c8e86d2ac8dcb5033eb9","size":27823,"data":"","first_seen":"2024-10-25T14:46:11.953956Z","last_seen":"2026-09-04T16:58:43.06156Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/assets/en-54ab0bbc.js","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0f1841e7bb84a1272eb38cb817edb373","sha1":"cc8168a73e257c4bbc7a8e4fa398a66b87c514e4","sha256":"3c49e25e423398b8b6e3b1a7a841c4c3e0fc4b35cf27451f74207afcc07416f2","sha512":"94a1c97522d5f9f80bf3845842335799a79f2d88f5cdcb1591af788db211580c8a29711d0e38e6773eb4c02aa953d8622f8633d81927ef47bae52670e05ae613","ssdeep":"768:KGtZcEw/o7reOK9HiH/uA/HJ0AaA1hAIClesGACU0w1mwO6fpk7aOLx0e:uponeO5JJ0IhAKsGE0wqLx0e","tlshash":"c813f7897d1a889a04f36376b4ce6e5120f609c1c266881f4fedc9fd53e2b676363724","size":44864,"data":"","first_seen":"2026-09-04T16:33:35.31206Z","last_seen":"2026-09-04T16:33:35.31206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/charting_library/charting_library.min.js","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-04T16:58:43.038014Z","times_seen":1420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/assets/vendor-2ea97265.js","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81a738eff93f9b4f11c73dee2bd75a3a","sha1":"be54ff7945d09afaf60dc898f98b5d9abe7b44ba","sha256":"59dcf66d8e2dfe9c4d84c0083727aae14f7422e0ef72bcd855c9435c5a6484ee","sha512":"bd616ae8b06b7a9f7d669dc329a83e92fe327b73f66f1de3727286f7e2c044d60df6f93325499a62c914cf3c75e4b3d672d59b327dfaba5e75ef80de90b6a76d","ssdeep":"24576:tEBId31yU97iC8aZigqJoxUMtpNeb5cajLiaZ7/Qn4FPvwh0gy/Icota2V:t2IZMU9OHahGIl5V","tlshash":"af253bd47292f06247eb20e540bb0002f2396e59744e8494f669d8db7db9d8ce27bf39","size":1017506,"data":"","first_seen":"2025-07-15T04:11:31.724365Z","last_seen":"2026-09-04T16:33:35.322612Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/#/no-wallet","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-04T16:58:43.071623Z","times_seen":1481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/#/no-wallet","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"51e586f9b3825943ee5e3bb9ca606ad3","sha1":"ca2bf67804939fb4d9bc9afb5f7470e36e0037f4","sha256":"63aa8568c2b31ae59842bdf28b74c1b266b81d186c72ee64d0ec371f48d458de","sha512":"ddd3f2c11759fdf632e9c6b4021c8755cee3bddff9efb9071dfef3f844bde35ef421169ce982ff1c69f7402dc70f428d776bba513a73136631b0a8b09e44c12f","ssdeep":"","tlshash":"a7c08cc6a0d22d001616641014af24e89024402670485f128c94d84c2e220f09233ea8","size":142,"data":"","first_seen":"2025-04-13T20:28:04.830126Z","last_seen":"2026-09-04T16:33:35.341899Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/#/no-wallet","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d8c10eeaec8711c4c51d17b01e87a93f","sha1":"2ce5063c7212ca19e637afc9e6bbdae136e9fd58","sha256":"94f3664a6b428436d413823bbf53039662ef86c75dfbdee2150f7f18347f99f2","sha512":"dd7a36d41aa4f093ec97e484d2cd40a710b5caeb36f84de3f4bad6219232d7be89994ec1d90f256375400b6eff78d6fe1d467fb8ec3cf17a09b58247ec242e81","ssdeep":"","tlshash":"05c08cfa39f294042c41013e0acd1831b2618073cc9d6f0cb8ccac00af9e42c15bc434","size":180,"data":"","first_seen":"2024-08-20T13:53:54.449605Z","last_seen":"2026-09-04T16:58:43.084789Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/#/no-wallet","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-09-04T16:58:43.085365Z","times_seen":4604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/#/no-wallet","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dcd79ed7f4bc026b4db96e1ae9b8fb97","sha1":"598a212ecf4898b9b2892412e9e83a400d5a008b","sha256":"cbb9e541e67567a3dc61831e08ec402a53984cff58a096f1a48597da3df62c77","sha512":"24a9faf9ea6f0ccd4e9af46a3ca424ff87b2b37001b079c8c4e0b0081d9a844d4e6bfc81c73a2243776d58f8bb1304f4d572975c70a3139c4d2125e5da54c9a7","ssdeep":"","tlshash":"95d0a7d5b1861e605745575524ef15e4a138842a76444716cd9c990c2a520f88333f98","size":224,"data":"","first_seen":"2025-04-13T20:28:04.831233Z","last_seen":"2026-09-04T16:33:35.345538Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ebgxqo.cc/platform/dev/favicon.ico?2.0.1781877844431","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:39.778Z","timestamp":1788539559778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1781877844431 HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ebgxqo.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:40 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a354c41-34ca\"\r\nlast-modified: Fri, 19 Jun 2026 14:03:45 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=prsw24ycsiL3rjEjTBElaDxpG0CDxDzj%2Bx9fvX4SC280ailii4CN53TjMI6DKwPjgPC%2FzlwTw0Tfydep9PtoMzRYfKUIDdmu6IkIqiT8hI6Eo%2BcU2CWH613Fj%2BI%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a35e6438aaa12678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13514,"size_decoded":3087,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 57x57, 32 bits/pixel","md5":"ec586768dce16790f7056909d45f0f46","sha1":"d026d8be78cea01b9395f44d5fc56d71aa649699","sha256":"34bf3b1776cb9aab67f92cd312a575de1b028c8831c31c613b3530e43738f3d8","sha512":"0554039bad35bd47f9adfd651feb75e4761a30276c91a2202132e75861e0411e132ce38f37952d7bee32a86959ed8ce998ebc3ada16a2aa5340d50c7de85cc64","ssdeep":"192:qX+k4ik9E9KK+mUcCfBUyBm1ivuech4Psx:W+k4ik9E9KK+YCpUyE1ivuec5x","tlshash":"2052adc16f7e14a1d20947ff87796ac6c009acf5b7c2a4a393f37314a139e1e7a25605","first_seen":"2025-06-05T02:32:06.409871Z","last_seen":"2026-09-04T16:58:43.035469Z","times_seen":50,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/platform/dev/config.js?1788539567003","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:47.007Z","timestamp":1788539567007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"GET /platform/dev/config.js?1788539567003 HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ebgxqo.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:47 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a354c41-9a\"\r\nlast-modified: Fri, 19 Jun 2026 14:03:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2BWA5mkLI6nYchPI9Dp6DCMWUqDTyzPRbHyGbuVnYQPVYf877t1WZgpBbJez7jFeJC3Yby9K%2BEZOKMaE85CLX2BRcNmsfRVsSXWoJPngjKOAf1N8%2BVfjJmTEfUg%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a35e6465dd802678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154,"size_decoded":778,"mime_type":"application/javascript","magic":"ASCII text","md5":"b46bdf53cfd08377e57b951826952098","sha1":"6a689c8c98b222d0e7a570fb73d0083ba0763143","sha256":"015a2d179c252136a47d1d38fc9c0b2b5ac81fffdabaa960be2a7a406fc53e7a","sha512":"1b7cd85fcd0fbe714dead1497c4de3608ff38fd6e924037715ce4df2936cee275d7de262186908fe1784fd39f7bb7ae7931f8b9473cdae84fb3e7d66dee82f27","ssdeep":"","tlshash":"9ac048fa2ab598092c44413a4acc5532b2928173ccae6b1db88c6c00af9e80c19b8431","first_seen":"2024-08-20T13:53:54.395031Z","last_seen":"2026-09-04T16:58:43.045223Z","times_seen":35,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/charting_library/charting_library.min.js","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:35.377Z","timestamp":1788539555377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ebgxqo.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Jun 2026 14:03:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a354c40-2a6a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jjBNv9%2BseXW1ly3l09eM5NAyet70vgk0VdvHHXKAKbyX9Cl2GSkrWRPF9s4SRcH3YS7G9HQKsLi28k9yL1u%2BDnd0zdPR7D3Yfs9HBZMcKpc%2FOTCKd3xqhbsRlIg%3D\"}]}\r\ncf-ray: a35e641d19562678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":4143,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-04T16:58:43.038014Z","times_seen":1420,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/assets/vendor-0926603b.css","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:35.382Z","timestamp":1788539555382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"GET /assets/vendor-0926603b.css HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ebgxqo.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jun 2026 14:04:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a354c54-16c16\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NvBpWAqR0IvbTqQzuxSxJ7%2F5HsyAXTEg%2FroQam5aPlqA7AGV3ubBLp67Bt%2FMij5acDTcQJppLjRp9N2AiX1dzr5eTU6GD9VVKgQlEAElspno57vO8iZSVQYhRM%3D\"}]}\r\ncf-ray: a35e641d29592678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93206,"size_decoded":40406,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"b7646ab2157bda9f87a85a136b0e10b7","sha1":"562dcb5834c8b11fa0b43167e43069facc9476a4","sha256":"0926603b8bb00ec6b9f2e371777d368bac932d0a8fbd8e8c6c9d8a123e5894e4","sha512":"1824a7e60d64715a509a04d661f04b776851e71f345e6bc4cbece5a8f217bfb6b5907867391b0162e162c6ec491cffa58d67e1cc46eb97295ec021de6e7b46ea","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/za:BnNIClDsIxuVS8na","tlshash":"d793d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-01T04:11:58.654275Z","last_seen":"2026-09-04T16:58:43.061083Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":565,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ebgxqo.cc/ws/ec005b9c-3b84-49b7-a762-8ff9748bae6f","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:47.005Z","timestamp":1788539567005,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"GET /ws/ec005b9c-3b84-49b7-a762-8ff9748bae6f HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ebgxqo.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: qF89VTysU85RdpfOz8O95w==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 04 Sep 2026 16:32:47 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nX-XSS-Protection: 1; mode=block\r\nOrigin: https://ebgxqo.cc\r\nUpgrade: WebSocket\r\nX-Frame-Options: SAMEORIGIN\r\nSec-WebSocket-Accept: 9EdP3ZbS6IAECfjN6xK+NK6AEXo=\r\nAccess-Control-Allow-Origin: https://ebgxqo.cc\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nSec-WebSocket-Location: ws://ebgxqo.cc/ws/ec005b9c-3b84-49b7-a762-8ff9748bae6f\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQV1Nmgo%2BqMAKeFgn8QAB5CdMRwGuY9ZyBdERPtQ3ZiLrmp4gHc7MYo1mJ9zOwh4cxiKiBE%2Bhjt6eT1EFhjQFV03Bz2uqGbh6je%2FqthbiMv%2BN1u9obpqoPxs7ns%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a35e6465fe5c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":956,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T18:58:27.736951Z","times_seen":18278546,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":0,"dns":14,"connect":15,"send":0,"wait":557,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/api/common/getAllSetting","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:47.010Z","timestamp":1788539567010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ebgxqo.cc/\r\nlang: en-US\r\nOrigin: https://ebgxqo.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:47 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1HZd31Sk0I524lQrgSMGdom3ALqGYNw7hXHd1tZDVy83aLBuF2ITnz6ZxMVghzC1UQ1hgH0VX%2BKQTqJhrRN3ni1RO9NjzOMtLN65lao4HDj%2FOmaMdJWOF%2BTqz0w%3D\"}]}\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: https://ebgxqo.cc\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35e6465dd812678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21058,"size_decoded":6518,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (20570), with no line terminators","md5":"4cb5cdee437fb9919a85a23e38ec074e","sha1":"eaec713ce0ff5f8271d3a0332c5814f83d47f8bc","sha256":"a938b47531ff86d6ca8c48d63627331c00943e2781d5ab533c91e6ca8e0ea10b","sha512":"930b4902bbe6cb83843c85021f2952fcfefe9afbd623177a2f450386e5bd9c15622e34e21cb5b57ed08961f8485ea6050fcc44289f96963176be4ef400888f4c","ssdeep":"384:UXqABD8HcRYK56d9d9WI9xS9X9PL0AMD/fsHPA9K9x9K99909z9P:UgSCELeDib","tlshash":"4f92520d3a8cdc79678657e910977bd17bac34a3e098ec4cd2aaaf1c8499af9040f416","first_seen":"2026-09-04T16:33:35.31014Z","last_seen":"2026-09-04T16:33:35.31014Z","times_seen":1,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/assets/en-54ab0bbc.js","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:47.817Z","timestamp":1788539567817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"GET /assets/en-54ab0bbc.js HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ebgxqo.cc/assets/index-39cee697.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Jun 2026 14:04:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a354c54-af42\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWMNymVCPG9ov9p2qFFpbSzB983nYAo1jIlOP%2F3AsPrQAnaSyqj5zslqjUjnzvAKXM9uXlrD0LZjeo2vcyl0h1zn5ZoDT48IzfhSOR1pJxEBt8k1D8jOoJDZri4%3D\"}]}\r\ncf-ray: a35e646adda52678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44866,"size_decoded":16464,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (44829)","md5":"0f1841e7bb84a1272eb38cb817edb373","sha1":"cc8168a73e257c4bbc7a8e4fa398a66b87c514e4","sha256":"3c49e25e423398b8b6e3b1a7a841c4c3e0fc4b35cf27451f74207afcc07416f2","sha512":"94a1c97522d5f9f80bf3845842335799a79f2d88f5cdcb1591af788db211580c8a29711d0e38e6773eb4c02aa953d8622f8633d81927ef47bae52670e05ae613","ssdeep":"768:KGtZcEw/o7reOK9HiH/uA/HJ0AaA1hAIClesGACU0w1mwO6fpk7aOLx0e:uponeO5JJ0IhAKsGE0wqLx0e","tlshash":"c813f7897d1a889a04f36376b4ce6e5120f609c1c266881f4fedc9fd53e2b676363724","first_seen":"2026-09-04T16:33:35.31206Z","last_seen":"2026-09-04T16:33:35.31206Z","times_seen":1,"resource_available":true,"data":null}},"time_used":897,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":631,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/packs/js/sdk.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:48.928Z","timestamp":1788539568928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 06 Jun 2026 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"19:F3:BE:1D:03:C1:6A:11:70:3D:56:44:00:C3:3E:3C:D3:0F:4B:4A","sha256":"41:90:21:DA:A2:18:E2:26:28:AF:BA:BB:D1:BC:A6:3C:CA:AB:29:A6:D5:E9:AE:75:BC:2A:29:5B:35:31:A6:39"}}},"request":{"raw":"GET /packs/js/sdk.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 04 Sep 2026 16:32:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 18 Oct 2024 11:17:36 GMT\r\nvary: Accept-Encoding, Origin\r\nx-cache: HIT\r\ncache-control: public, max-age=31556952, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27823,"size_decoded":10402,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14155)","md5":"f77d2cbbbd7542ce7bfc84f21c4fc25e","sha1":"7c4abd866399c53c13b9b7c752d57e836540d0e1","sha256":"e03b3e1555b0e19bb14a3f7563504d8f4bb1580346749132e2d7a0f2447cbd4f","sha512":"bdba42f3b42ce2d4eeb3d0b97fd73a7d08c315c22b588cab81065e910f73c2b659f0b26ebfbca9495dcba10196f2d106b9e5a225a98d56c0d2613cd89fb00a2a","ssdeep":"768:6464XK0h0i04Y0t0Z09af7evYvMBG0iKTpQRtAtjF060EfufYJuT1GqFxMzWPsUQ:vRK0h0i0z0t0Z09af7evYvMBG0iKTpQa","tlshash":"5dc2fad16291797407654ecb27a7b718b33850b5f14acce0e5c8e86d2ac8dcb5033eb9","first_seen":"2024-10-25T14:46:11.953956Z","last_seen":"2026-09-04T16:58:43.06156Z","times_seen":131,"resource_available":true,"data":null}},"time_used":1589,"timings":{"blocked":-1,"dns":13,"connect":202,"send":0,"wait":1165,"receive":0,"ssl":209},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:50.548Z","timestamp":1788539570548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 06 Jun 2026 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"19:F3:BE:1D:03:C1:6A:11:70:3D:56:44:00:C3:3E:3C:D3:0F:4B:4A","sha256":"41:90:21:DA:A2:18:E2:26:28:AF:BA:BB:D1:BC:A6:3C:CA:AB:29:A6:D5:E9:AE:75:BC:2A:29:5B:35:31:A6:39"}}},"request":{"raw":"GET /widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 429 \r\nserver: openresty\r\ndate: Fri, 04 Sep 2026 16:32:50 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncache-control: no-cache\r\nx-request-id: 76750177-67b5-4656-a9b2-f4038840c947\r\nx-runtime: 0.001830\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":247,"mime_type":"text/plain","magic":"ASCII text","md5":"f3a05e529447f12794fed510eeb232f1","sha1":"57d256192af99ce8ac620af23bad342fad0a5fa7","sha256":"b8d6a6c2b22b2fc3df71f858c75b65a19914fdc6d0ca37e78a6017f1c5c62689","sha512":"f92052d4ec44c59466a4eec4ec309204c975f381ba64883d2538a14234310cfd462092bcc4f28e3f51b1480b443ef5c34b70d6abd558b75f2dcfbcf0e9c91b40","ssdeep":"","tlshash":"fc600000003c000000c0303cc0300c00c00cc000000c00c0fc0c030c3333000000c000","first_seen":"2023-10-26T18:38:40Z","last_seen":"2026-09-04T16:58:43.060601Z","times_seen":326,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T16:32:34.603Z","timestamp":1788539554603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:35 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 19 Jun 2026 14:04:04 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fyv2vQ88qlkYQR5Y6sf4X2Tq%2Bu8vRO4ga8kvw7t8XRkVd%2F%2Fw7KG%2FtKemD1jN3Xyc6JFwzipDbzuagci6DBcgg08hYPvCVJH8A356%2Fa230dVP0SxlxplHrTuGn9I%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a35e641889272678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15160,"size_decoded":8729,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4168)","md5":"7bf11a793c7638bfdbdd81f342160124","sha1":"6dae2dd7d72fcb0be0d4e7688bc47fddb1fbd4ee","sha256":"a52758ecccce2677646a00060b18479f814f48d1e453d0ae80f30031fad7e582","sha512":"83b081d25c68cf87fa6e7373fb9bfdc9dbacaad47a8cff5737fffbf85331c303afdf8038aef53273bc9b911c7e81a527c56a74888ab428a7a79bc6b6ca8a99f0","ssdeep":"384:2YSKmXLdKJ93bxEQIF9S3qt1IZCxg2LiNZo:2xK8LxbF9S3U1IQxg2LiNZo","tlshash":"11626cd755f4c7d8b38ac736b9e6b0057d2220b3a646cd8871dd24e90f50fd288cbaa1","first_seen":"2026-09-04T16:33:35.317672Z","last_seen":"2026-09-04T16:33:35.317672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":0,"dns":23,"connect":17,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/assets/index-39cee697.js","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:35.380Z","timestamp":1788539555380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"GET /assets/index-39cee697.js HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ebgxqo.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Jun 2026 14:04:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a354c54-1f043\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMfocyIaLs5CgM2JSnv30QtAfJvBem49af3pV3q5PJ74RmMUdabEcb4FyzmOOkurTIgmhHYCRp%2F203akZ44MTjMBthANEn%2FiGY4HbiH2WST10gUSnuApJyijFvE%3D\"}]}\r\ncf-ray: a35e641d29572678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127043,"size_decoded":38410,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"e5e67e4b569aa4e11d91440ca641dfe9","sha1":"ebab74c6cf3dc5cdb05f1c80fd1c62b9d53c395b","sha256":"817ecef166f480c9a6262e82bebff894e112409e6195c71821f1f69ef27440fa","sha512":"92991c07125a6a0064251cf39262c33b44820bafdc76ff4f69d2553dcb4be73f23027ebf3840b3428132809bb310f88b43f24091037a084d0dc173be893b9e8d","ssdeep":"1536:K+FJhtt+Uvi8tLQRm4jDExMkn2hBiuMv3ms6CeowwE9upHjmv4MrbT:KEJjtxi8tLQrs7a9Mv3ms6CeohufrbT","tlshash":"d1c33bc9f50a4fff6cf94c14aa59001021981fd7a98ccce3f7e96e5627bacd4224ab15","first_seen":"2026-09-04T16:33:35.320468Z","last_seen":"2026-09-04T16:33:35.320468Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1527,"receive":1067,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/assets/vendor-2ea97265.js","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:35.381Z","timestamp":1788539555381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"GET /assets/vendor-2ea97265.js HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ebgxqo.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Jun 2026 14:04:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a354c54-f86a2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wJAn4E8v0kEJxfcWLPK%2FNakGxQE5lzYF5wuwstk6RkO1soByjSjS%2BisnacrPnebCWJ6BOfdTkDP5aqzUxQxpMh9TddQTSHtHJUZdc6I1uwGjE165V4Qm%2BesM56w%3D\"}]}\r\ncf-ray: a35e641d29582678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1017506,"size_decoded":350967,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"81a738eff93f9b4f11c73dee2bd75a3a","sha1":"be54ff7945d09afaf60dc898f98b5d9abe7b44ba","sha256":"59dcf66d8e2dfe9c4d84c0083727aae14f7422e0ef72bcd855c9435c5a6484ee","sha512":"bd616ae8b06b7a9f7d669dc329a83e92fe327b73f66f1de3727286f7e2c044d60df6f93325499a62c914cf3c75e4b3d672d59b327dfaba5e75ef80de90b6a76d","ssdeep":"24576:tEBId31yU97iC8aZigqJoxUMtpNeb5cajLiaZ7/Qn4FPvwh0gy/Icota2V:t2IZMU9OHahGIl5V","tlshash":"af253bd47292f06247eb20e540bb0002f2396e59744e8494f669d8db7db9d8ce27bf39","first_seen":"2025-07-15T04:11:31.724365Z","last_seen":"2026-09-04T16:33:35.322612Z","times_seen":7,"resource_available":true,"data":null}},"time_used":11442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":895,"receive":10547,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/resource/images/light/nowallet.png?2.0.1781877844431","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:48.933Z","timestamp":1788539568933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"GET /resource/images/light/nowallet.png?2.0.1781877844431 HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ebgxqo.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jun 2026 14:03:45 GMT\r\npriority: u=4,i\r\netag: \"6a354c41-8c14\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2FTQcCIvJqy5PXXRohelgd%2BdBHD%2BSA1M4cgx70gN7GuwHIHEwiBJoGRQ0x0NaAVOqMqlqLqAcTWK4AmAaMdBnyunjDVhwfgsnu146HNaT%2B7HBDU48MsCnWLbVaY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35e6471ddf92678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35860\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35860,"size_decoded":36543,"mime_type":"image/png","magic":"PNG image data, 800 x 356, 8-bit/color RGB, non-interlaced","md5":"a3877c3de6991724167020f4746cd343","sha1":"96568f8b5ed09a56ac2f9fece74d54bc7629d57d","sha256":"e63c8b25303ff05fad80631688c5638be2edd6c29bc8b92670ba4780a8fab25d","sha512":"7aeb267846808fa244c76e55be3dc5f337bfc6d8e82b6e1a5af73553985bf6e4b3ca6e26064c94bc8cd227bebb3bdb01ba46dc534cabc90ebabf488ef3569cea","ssdeep":"768:/N1IBFqG0kSI5ta4rUSlWUbsylujjXL+GFCTh:/NCqTkdECAUIPXSGmh","tlshash":"18f2f102fe7af081f32ce1f3a5662f77562e111ddf86e62672dad45e01011b62b91c8d","first_seen":"2025-04-13T20:28:04.816981Z","last_seen":"2026-09-04T16:33:35.325276Z","times_seen":53,"resource_available":false,"data":null}},"time_used":1856,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1593,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/platform/dev/logo_144.png?2.0.1781877844431","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:39.777Z","timestamp":1788539559777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1781877844431 HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ebgxqo.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jun 2026 14:03:45 GMT\r\npriority: u=6,i=?0\r\netag: \"6a354c41-2200\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WKZmOqZUxYzSpJWkvnjjupWsNjsiAdRaNgm7Tk5h6lSqCAwhMqNFwXSKvBYCq%2FdUV%2FchOP%2FA302Hc4d4NygsW3PScVg7ZU6SKCbwJj3N0BeUi8whN%2FDDJ6biD4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35e64389aa02678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8704,"size_decoded":9389,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"d95e73753b2f0af7b6cc618274c2344b","sha1":"041bbb05cfc88c83b81963c509a0f4dc4a143b40","sha256":"2be32ebf37e4704833b7d293657cc754f7f4b39c43c618717acadf6c9d9eba1c","sha512":"64320a175eadd1cf658506d82f7bc8cc9e82cf560cad1e3b61b3dfa837566d5bb63f817254ba25046f6c0db08c3fef845a3795cd31686c62dab3707a9bc2eb89","ssdeep":"192:tRW6RkmGXTvSR2FR9O/k57k7xDByF+SOrXZnuwpasunxwWGFt8vXVz:LWIdKTuYR9byJBHSiuBNxlUU","tlshash":"f702afde12e43789490ecb512910bf50ada698d4b5a39db5c332e146c829e9c1637f2b","first_seen":"2025-06-05T02:32:06.437936Z","last_seen":"2026-09-04T16:58:43.034225Z","times_seen":95,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/resource/fonts/Arial.ttf","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:40.219Z","timestamp":1788539560219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebgxqo.cc/assets/index-fd9805e2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:40 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jun 2026 14:03:45 GMT\r\npriority: u=3,i=?0\r\netag: \"6a354c41-ff9e4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQsjYOeTIS1w3U0XsDE52XDxSyNWW7nnvkpgjt8U34Z3zjy3rKOB4ev7c0CBvc9GAGK2AvOzE%2FfhO%2FjNrIrr%2BhK7wC400k1RF7BjNGyAa2OlW5bLqu2KSVY7g1Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35e643b6acd2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":1047714,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-09-04T16:58:43.029725Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":2110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":549,"receive":1561,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/api/common/getCoinList","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:47.012Z","timestamp":1788539567012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ebgxqo.cc/\r\nlang: en-US\r\nOrigin: https://ebgxqo.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:47 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oyz6GFxILDYlxm1%2B6uPLqjO1FMV7fFlKCyPEHy37jXjYFeP97xYU42lkPhkWcTKBECtX%2Fj5K4o7I4jqIPeNh8XZlsqdAyqRh4Obq%2FQSHSQWOaN8IT1bzyHKfDIY%3D\"}]}\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: https://ebgxqo.cc\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35e6465dd822678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25830,"size_decoded":4440,"mime_type":"application/json","magic":"JSON text data","md5":"4a533a9e1afa59203d19b4b41e6414d0","sha1":"2a389a329b92f945148b2e65fec034959e8791c7","sha256":"573b339d0a2a413b67b6b6398a269edf514b5573da9a43a9f9379f0e0369f44a","sha512":"d65d437e30ce864dbd8d5fbea5cffcfabf2f84dfae47132fa34ecb438c0adcf1a8337917adf98e959502e1eeba70f177a2ecfee8345665d2bfcd0dd9b0177e05","ssdeep":"192:v/RP4u1Jus5LRNEp+yiRiiKibWR3yN3AgBgnHdNdJWD7D7mUJU6hNAhqa6qKRKmL:KuvWIFkTe","tlshash":"50c212495a28d469da75c2e11e6b7b63d18c307fb8c88a4ed6de4c54cdc8fb8464fb01","first_seen":"2026-09-04T16:33:35.330144Z","last_seen":"2026-09-04T16:33:35.330144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/api/common/type/defi_activity_type","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:48.931Z","timestamp":1788539568931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ebgxqo.cc/\r\nlanguage: en\r\nlang: en\r\nOrigin: https://ebgxqo.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:49 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8UCtN3V6NqyDMRVSGOgcbcf6Vqgx6gPIxQIxZSxgluPE9wz9XU0o%2BHx1tufGylon8r9f6grzCIv1ux%2BzWOU3Stmxe6liNu5%2Fg8Ul9Dnb7hiKWzC%2B%2FiixIFoJFHw%3D\"}]}\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: https://ebgxqo.cc\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35e6471ddf82678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":713,"size_decoded":1141,"mime_type":"application/json","magic":"JSON text data","md5":"d3ef2083b3b07cf614d1281d7263737f","sha1":"536be3cfe039644f7d722f9361972260ef9a3181","sha256":"e6808706b97802fb51a06c7784b8efc703f3f68414adfad67da80393ee5eea88","sha512":"b63f701ac8ceedcc75c6dbdd8869e285231e53e8c6e01015d640d6d156ce15c46062fed4e63ba5eb8ff8ca0fb89511005f48e808cd35bb1a0125b7ae0b2948dc","ssdeep":"","tlshash":"1d012618393edeff198f15e344ed7c143a9c1537a0a4aca0a86b4f3c2ae8071188925d","first_seen":"2025-06-01T04:11:58.661074Z","last_seen":"2026-09-04T16:58:43.034845Z","times_seen":62,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebgxqo.cc/assets/index-fd9805e2.css","fqdn":"ebgxqo.cc","domain":"ebgxqo.cc","tld":"cc"},"ip":{"addr":"104.21.39.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ebgxqo.cc/","date":"2026-09-04T16:32:35.384Z","timestamp":1788539555384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebgxqo.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 21:18:46 GMT","end":"Sat, 24 Oct 2026 22:16:22 GMT"},"fingerprint":{"sha1":"D4:5D:ED:6D:DE:8A:D8:3F:74:3A:46:34:40:9D:37:7B:33:D7:3B:CD","sha256":"BE:7B:86:53:40:90:55:29:CC:BD:65:40:F3:F0:21:9B:96:EB:D0:C5:23:70:22:FB:88:82:5F:75:EB:FA:FA:C2"}}},"request":{"raw":"GET /assets/index-fd9805e2.css HTTP/1.1\r\nHost: ebgxqo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ebgxqo.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:32:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jun 2026 14:04:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a354c54-4d053\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNtJGF7q9aGlXeNHLst7qf4TWXPS3v1dFffuQIg1tuep6M0cO44FMrCLEq5DiOw5T%2BSCAvQahQQyqCt0mPfdTQHBA1%2Fgu10ciSkFXZkV6fHUQkve2r3OgI4aeFg%3D\"}]}\r\ncf-ray: a35e641d295a2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315475,"size_decoded":77457,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"5a222ed3882a0de305bb0edde7d25014","sha1":"41538c092ada956a5ef8ac45434e943fc8f32f02","sha256":"fd9805e2c30e6fca2ed9d4e041dd1cb399c4edacdd18f7e47c215f4e7ce95c6f","sha512":"4a8ada0ce463bca275bce0aadd305549d7f05747b7d188fe712bc14524178a12f50d44601b756be7e6951988ab3ace5785919c6b0ad825142337b5729fa71a6c","ssdeep":"6144:nevxsalDWgEkZ8w71ZACkFDS3vyf58rBeV05Tn:ev10gdZ8w71ZACkFDS3vyf58rBeV05Tn","tlshash":"7964d7a9a590117c6f27aa759bce5ad8f23ce6719c018de8f20150094fc7ffa2363617","first_seen":"2026-09-04T16:33:35.332887Z","last_seen":"2026-09-04T16:33:35.332887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1605,"receive":3198,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}