{"report_id":"fab083a0-5475-4cd0-a9e6-d3e77190cdb6","version":0,"status":"done","tags":[],"date":"2026-09-22T21:12:39Z","url":{"schema":"http","addr":"saxox.cc/","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"172.67.199.189","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"saxox.cc/#/home","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"title":"SAXO","dom":{"size":3868741,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (56486)","md5":"1469768747b2f89228a22dd0c495f468","sha1":"1d678b61b73fe6cf77d3cfcf52f7a8671663637f","sha256":"98f223311326606d48d9467443ca004a6e737ec94fc4e764ef228e2ea3e64d34","sha512":"d5bf9e3b148a209fc6212d984a4cc8569460de0d4d73baed8c40db00d2d1fb8385e63e5ebe1adcb79a3dd2cbb9abb8fbaa09cc70e54ec625a4f8b64a56a7dcc6","ssdeep":"49152:7vFpY8A3UspB/qjVcMUHuiAEtXw2AbUEJVcMUsn:N","tlshash":"b6061271ab1852be095787dcd3b23a5d3f5da1afe0908844ba5c45716ae3ad0fd0f8e0","dom_hash":"domhashc6d94d43f4be004ee5075d3847aca63c","first_seen":"2026-09-22T21:13:15.657977Z","last_seen":"2026-09-22T21:13:15.657977Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"saxox.cc/","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"172.67.199.189","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T21:12:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"assets-cdn.salesmartly.com","ip":{"addr":"143.204.238.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":507251,"first_seen":"2024-07-26T10:32:03Z","last_seen":"2026-09-15T09:30:49.766572Z","alert_count":0,"request_count":1,"received_data":23482,"sent_data":656,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2026-03-05T18:43:03.852923Z","last_seen":"2026-07-23T13:49:23.572452Z","alert_count":0,"request_count":22,"received_data":641825,"sent_data":11925,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"srz.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":378797,"first_seen":"2024-02-20T03:50:45Z","last_seen":"2026-09-17T08:46:14.147289Z","alert_count":0,"request_count":3,"received_data":2067,"sent_data":2369,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bin.bnbstatic.com","ip":{"addr":"143.204.238.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2018-03-27","domain_rank":229363,"first_seen":"2019-06-17T01:31:06Z","last_seen":"2026-09-20T09:24:33.268308Z","alert_count":0,"request_count":1,"received_data":2039,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":2,"received_data":14028,"sent_data":1040,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":2,"received_data":73482,"sent_data":1152,"comment":"","tags":null,"fingerprints":null},{"fqdn":"client.salesmartly.com","ip":{"addr":"65.9.46.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":491526,"first_seen":"2024-06-25T09:52:15Z","last_seen":"2026-09-17T08:46:13.850927Z","alert_count":0,"request_count":2,"received_data":84970,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"api.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":387428,"first_seen":"2022-11-29T17:40:50Z","last_seen":"2026-09-19T19:57:49.423397Z","alert_count":0,"request_count":1,"received_data":825,"sent_data":712,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"saxox.cc","ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":36,"request_count":36,"received_data":13609161,"sent_data":16897,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"plugin-code.salesmartly.com","ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":530835,"first_seen":"2024-12-12T08:03:04.74606Z","last_seen":"2026-09-19T19:57:49.273616Z","alert_count":0,"request_count":13,"received_data":1369989,"sent_data":6558,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.saxox.cc","ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":16,"received_data":54862,"sent_data":9312,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"msg.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":360322,"first_seen":"2022-11-29T17:40:54Z","last_seen":"2026-09-16T08:43:23.320312Z","alert_count":0,"request_count":7,"received_data":5109,"sent_data":5665,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"widget.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":0,"first_seen":"2026-05-14T12:23:01.692825Z","last_seen":"2026-09-17T08:46:13.739618Z","alert_count":0,"request_count":2,"received_data":6148,"sent_data":1309,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"saxox.cc/assets/index.b73bb044.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"687fb8a004b771e53692fe2d46387053","sha1":"b0828dbbee2f0048482af325e17211522bb25fe9","sha256":"a7fe6d7cdf82df2a59e8a84978f06c949ddab3b55b1c93a22b9e38c24767f6b5","sha512":"a26d50aeef10ddf42aa499460adca460942b4f635800b4827d5377840cdcdeae96effd0c76ac93296de65214724009829b978b9f91de72b10389df914fcb8c4f","ssdeep":"49152:g2XbTtqHpcjWmF/5r52ObM7pamK+hP9hvk0n3DG71hMEJ1cs/e+rgYr/96bFPL8q:ZYKx4","tlshash":"c746e1a47595b0a547f744e480bb0006b73d6a597008c4e4f1adcde73aaad48e2bbf7c","size":5854939,"data":"","first_seen":"2026-07-17T15:46:52.097719Z","last_seen":"2026-09-22T21:13:15.703451Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/core.esm.b4c18107.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","size":40515,"data":"","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-09-22T21:13:48.419739Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/55a9f80e9b3f418f/modern-runtime-probe.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b328edef916cc7bf1fdeb389b5661d07","sha1":"be897a337114691b10789de7e814644c5c4cc493","sha256":"55a9f80e9b3f418f07b8b7cffac25b6dfa971b690da09234545508356fb8cc30","sha512":"dc48c85326afb5b2cb99df0fd5b3ca139acac8e3e6eb1f41f40162c4993bec33f39e7f2ff0d7a55a1f350a2d669af2a531755a8fe653762e006613d5f5c7daa5","ssdeep":"","tlshash":"1a01ce7eaceb30230012243a365b24287579a63711c45d8cfe8d0be44f01d384634f1c","size":850,"data":"","first_seen":"2026-09-18T05:08:27.131411Z","last_seen":"2026-09-22T21:13:48.430066Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/charting_library/charting_library.min.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-22T21:20:05.469276Z","times_seen":7335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/index.a66d74f9.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11565ad0e359f4ad8b90946f5a0344a9","sha1":"0781f4a0f8a668a6e92e737350b1bf5f8fd0742c","sha256":"48d9effe6a5760439d34f58227c978ca95f47197a4e24c841d2af158d90dd8b9","sha512":"2ad6b9b095c212423890cc8c423e05bed903528c493780273835eb4334d264c3aa9eb13ce2ad5c5d71f1a582bdd4e041d2d517ed3810f2e4d8bdd111c89139a8","ssdeep":"384:9xO60Nk3eHzP/vU0ijZwfyx25DMvMk/gN42h7Z+PERpKZ:9xO60q3kLnvijZwax2IMLN42T+P80Z","tlshash":"9bc21fb8f52a8978f1f78951105c3505224cffd385508693b6fc2a599b83dbc3b8e72a","size":27543,"data":"","first_seen":"2026-07-17T15:46:52.069306Z","last_seen":"2026-09-22T21:13:15.694359Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/customer.min.js?1790111520589","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ecb1aa6f5440d1d93addaacb61abd14","sha1":"d42e1dc9c18cdc20019111cb12552aac58b0f540","sha256":"f83ee3823ca3c5a16edd89f8c175414d456967fe04fe21e25fbfee75f4747345","sha512":"30cca24160437799c1f3abdadc3674b829171d680a4f77540dc3f3ec240d74216551b0f1e6ac4b0768e9120e59c4850a1d940752f35a39667a0a0b8938285997","ssdeep":"","tlshash":"f421e1071ca2647976e5217b563fa9d93549d3012448cc21f889c57c6f90dea0e6add8","size":1118,"data":"","first_seen":"2026-03-09T14:08:14.115058Z","last_seen":"2026-09-22T21:13:15.668138Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/customer.min.js?1790111521282","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ecb1aa6f5440d1d93addaacb61abd14","sha1":"d42e1dc9c18cdc20019111cb12552aac58b0f540","sha256":"f83ee3823ca3c5a16edd89f8c175414d456967fe04fe21e25fbfee75f4747345","sha512":"30cca24160437799c1f3abdadc3674b829171d680a4f77540dc3f3ec240d74216551b0f1e6ac4b0768e9120e59c4850a1d940752f35a39667a0a0b8938285997","ssdeep":"","tlshash":"f421e1071ca2647976e5217b563fa9d93549d3012448cc21f889c57c6f90dea0e6add8","size":1118,"data":"","first_seen":"2026-03-09T14:08:14.115058Z","last_seen":"2026-09-22T21:13:15.668138Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"591653a6ed34d09ed551358f9a7b79b5","sha1":"08279f224ead65fcbbce218d353cdc1e923f8430","sha256":"776c9a312c4f27042989945ae1dd882c8b798c3c054a1428c8769eb6a724a20e","sha512":"678c7ca7263b657172fdbd1d79b55726964ac6a1802d9a3cc06ad0436b3e4979b4dd6a884551fb93fe4260e77667b849b14abf60610a097faf3d609ba5dddf53","ssdeep":"192:QC0YZgFFR1F0QdIGY4p3xmWdHFQg2uzYV9us6yYH7ltCAwxeon2OypVz+9Hw6RwU:D0YZgFFzFSGqW12g2UyQmGu2jSQjVKbJ","tlshash":"bf322a193832697555b80c94607a9302b5ed26633005d4f0f2fcce7eb655e8782b9ebe","size":11360,"data":"","first_seen":"2026-09-18T05:08:27.076662Z","last_seen":"2026-09-22T21:13:48.423599Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"55bb175e22d7ea9f0d3f4815fa24c578","sha1":"d76864c11a42bff61779b52396d33ea99c46eb64","sha256":"8529f3d80f868c6f4121eab6a7b9f7ac6d19f89559502602cdaf2f91ad5ba614","sha512":"8fc39c6637e78fd48599026bec71361668175456a2b3d76a8eadf37f107bdbbc486feeead4ad200e9c628179b461c7eefb804222cb9a7619901e733b90d82de2","ssdeep":"1536:bzlbWdNzaNG6ZJgJdvJQ9CtXDTHEN4QC8AOgoAhWo1uVLxYnTUnfd5+k3:bzlxN6/tv84QC8AAAhr15TUnfd5+u","tlshash":"06b31cc47293b06643e324f4406f144af17dbc24548c9498f2a5e5eb7cb899e92bbf78","size":109345,"data":"","first_seen":"2026-05-14T12:23:11.144675Z","last_seen":"2026-09-22T21:13:48.42755Z","times_seen":456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/plugin-D6LAqEbs.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"28d8365184b9eec1cf876cb6cd4221c8","sha1":"531d945508aa3aed35149761034874e75fa7c8a5","sha256":"72607b44ad2e00e07ffb76053a5b797c1f46f00852ea6a86ad17d2a9a36d423f","sha512":"bde256996f74af09d92b181d903a2929ebc99c0322470e110ab89350342706fa566435f3bc7778f469eaa17ca202dc965d8c2ede666a65daf57b67a899190f01","ssdeep":"12288:1J6bdg6akmB8LlWQaHeVQqcgVt4JSelp+SOIcFEcARLAhSMyRr3YCpLAA4zLLeJi:7qSnRVeLKJg7gLI","tlshash":"91c46c4df2a67836d3f65490a0e64444726c0b69e004c8f1f5bc9eb91772da2a3b3b7d","size":554610,"data":"","first_seen":"2026-09-18T05:08:27.454664Z","last_seen":"2026-09-22T21:13:48.375433Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a58e81225f31d48fb39ab725fc122c6","sha1":"57f6ca38bf2738977cbb31419e46bba8f04ece90","sha256":"f72d67e6df36781cea40e7b0718f1168ce47867d74220357e7c4778388b62479","sha512":"e82ec3d82ff285218b3c37966e1e3259a93616d78d54de8a63f2b8c78935e233eec92fa7916851025530d7274242e6c2d0db73895c08e3a565c43662145aa2d8","ssdeep":"","tlshash":"7311abfe192a602e6303405e976b7801642260a9400a184273ccde9dbb9ab6dd0cbb8c","size":1034,"data":"","first_seen":"2026-07-17T15:46:52.091941Z","last_seen":"2026-09-22T21:13:15.703973Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9988204b465c5f291cde56c7367b71c","sha1":"bbfd28ec48085b50f7bf2d29ce360dedc0b67065","sha256":"e4348a3c9d1a33865ad565906a0e10b77b8acc216cf0b01c9c48c66a562dd1fc","sha512":"62c249d781fcf4b691433075224a2cc8cfce86837afc7f02850689ecab62569b6aca9971cf88866e8845571494b6ab5ee183867c3e00981418d094b078a479ae","ssdeep":"","tlshash":"6f31369836e5f8a153d76568013f8045f3ba08651879f4e0d3a9ccb9bc34c8d4073f5a","size":1578,"data":"","first_seen":"2026-05-06T06:21:51.036806Z","last_seen":"2026-09-22T21:14:40.560783Z","times_seen":649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"851396daca502cf14521cecb02aca66b","sha1":"bb13fe69b1452c392af9fcb5d6a0e8523f789053","sha256":"5c29248518f8aa0821cf4befa9c56db3d88f062e67c0efa695b1a38faaa6e7f0","sha512":"265b520f2bd1a731befe5ed42b45a93fd8e544c9a79a604ae8805319c5ecadac98c2164a47033bca294649e807252e8d1c22d7c9af04727856acaca9c665bac3","ssdeep":"768:PaBBRBSMFXGxkrCCIaPKvCz8zePMEccNeEMucEa6wPyCDYFDSTxhh+710STFR4ub:mv+w9126OIfFJSwRJFcTzA","tlshash":"43330ac9b691b06243ab60f0406f490af33a9925744c84a4f158dceb3db650edbb7f6d","size":52936,"data":"","first_seen":"2026-05-14T12:23:11.004494Z","last_seen":"2026-09-22T21:13:48.403303Z","times_seen":458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BO1BJI-2.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1f0d3975c955fddf8c4b49ebe568407","sha1":"7b559dc893e3a59fe77d9553a8af7d6931f2e068","sha256":"85a50ac089309670d7b46e44d1ef17ab132599486ba995f6f12d07f72f4dd191","sha512":"e28c1ce7e3b1b762886f98bf8611a0b33a157c355a760d83602a75df917689c2013d51d4e52faa14445af13ec9bb6eed797f96db1ebd6a8bc8955c90289f1bdc","ssdeep":"1536:ffeY1Ph7WaDN38VCuXI3BDDAeP0/AKANwnntDi:fWYmahMqBDDAx/LANwntDi","tlshash":"507319e831a2b47113ea08e1507b0406f37d6845344ac4e9f5adaedf3e7641641abfbe","size":79629,"data":"","first_seen":"2026-05-14T12:23:11.157843Z","last_seen":"2026-09-22T21:13:48.417471Z","times_seen":457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/#/","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"795274246e741ea3d448a14c71d209b9","sha1":"a35cbadd65b5855c1e603f7ccb011e974ebf39b2","sha256":"aaf3c8326987392a77728d204a8b98fd50b1736dd593f1bbbda68af8759b86c6","sha512":"f441b644f48bf7a7d540e297a6540194b9980a77e99cdb8f33e07c07a09f24717347fa5e05b3ab78dddeda8784588e89e55dd0d79c2487e8af7151ed75dc3744","ssdeep":"","tlshash":"eef00281f2b49c28194049764cc714acf5710b775a4d3c7df3a6b0503f4d85b083e56c","size":643,"data":"","first_seen":"2026-07-10T15:16:49.503945Z","last_seen":"2026-09-22T21:13:48.434026Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/code_project_plugin_g175k1d.js?t=1790111521612","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"86698fd84bfc45e1d1a0046ae385bc3e","sha1":"c3e1bf145eaf0e8f68a8dfa2359a7e719ca4ee2a","sha256":"d6bec0099cae6c62866e835def82a3c538beed00cd76e3a97927bb340cf6e815","sha512":"538a8afc65110dd9deeb1675b6533a05d0a2d606ee89bac249da87a84b5f463c69833adda39fd94c065584e1112fc32e1385fdcf1a20d2d5e7dc5af2f1dd23d4","ssdeep":"","tlshash":"de80041403155017047f05140111134333d4535015f050110131d01d75705d741d144c","size":36,"data":"","first_seen":"2026-05-14T12:23:11.039703Z","last_seen":"2026-09-22T21:13:48.376231Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dadb543168ead49104bfdbd9a6792ec","sha1":"e107d310f08d785f513df33c57ffd4d5ee9eb38b","sha256":"180bebe289c59cf98a27430d0753a1a50170d40e40524b05c8373160a8696d59","sha512":"ea2db13466c34612bc7f01196882e037fffba5b487a7e1c492eddf2777c6462436a709998f3791b24d952229ea01ef373d1cb9be44a94affab73e92f59ed170c","ssdeep":"","tlshash":"ea311499b9b1b431779508f660bfc58bb5723562380dc000d98fec95b92ce60d632e59","size":1673,"data":"","first_seen":"2026-09-18T05:08:27.365418Z","last_seen":"2026-09-22T21:13:48.411111Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/CommonMethod.b79fc123.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3117072cb793580713c1eb83c79477a7","sha1":"24719bbae2582ee1451a0675faeecc2072f0e479","sha256":"21be9c26a43cf8fb09259a7f9767394de4cc7116931ec0519d754e22373f4a6f","sha512":"4776242496161290e853e7f05ee650dcbdffbdfa85b3bce65f6eab7cabd12ed74f4acedb5cc724a9c31ae6fd3df11e2e10e41302ba4678f2a80c3de5725f8162","ssdeep":"","tlshash":"111100d0e48dfb291328db69a1208033f25d48b51e288764d0f95d717b29449b79ea24","size":871,"data":"","first_seen":"2026-07-17T15:46:52.079696Z","last_seen":"2026-09-22T21:13:15.66666Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"414612d0f626762dd4064a9d11f821c3","sha1":"1dfc6b06d8e4ca15ca986617d42e38eae947e94d","sha256":"39d68e743efe9cd9348cdd0e395ba726e43fba69c9288ca14554821d55969fe2","sha512":"87034b7526f8ef8dca2da1c61920e35f138214e42516e48057c3b39ee646a012685a924eb7155a60e8baef89aafc2ae9569f0d6e3635a3d812dfbeb95584d8fa","ssdeep":"384:5rlwqjdJMrxZ37t3XcCCcEvX5GG62NzbtJ5bOSKOjPComEWaj:tlwB329IBAbUbOjPComEWaj","tlshash":"d182b3c974eab58103927078153fa04bf1b37836556dc629a269d1defcbc08ee227d38","size":19114,"data":"","first_seen":"2026-05-14T12:23:11.031581Z","last_seen":"2026-09-22T21:13:48.393515Z","times_seen":456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"65.9.46.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","size":36489,"data":"","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-09-22T21:14:40.550512Z","times_seen":3018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/#/home","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a58e81225f31d48fb39ab725fc122c6","sha1":"57f6ca38bf2738977cbb31419e46bba8f04ece90","sha256":"f72d67e6df36781cea40e7b0718f1168ce47867d74220357e7c4778388b62479","sha512":"e82ec3d82ff285218b3c37966e1e3259a93616d78d54de8a63f2b8c78935e233eec92fa7916851025530d7274242e6c2d0db73895c08e3a565c43662145aa2d8","ssdeep":"","tlshash":"7311abfe192a602e6303405e976b7801642260a9400a184273ccde9dbb9ab6dd0cbb8c","size":1034,"data":"","first_seen":"2026-07-17T15:46:52.091941Z","last_seen":"2026-09-22T21:13:15.703973Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/customer.min.js?1790111524403","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ecb1aa6f5440d1d93addaacb61abd14","sha1":"d42e1dc9c18cdc20019111cb12552aac58b0f540","sha256":"f83ee3823ca3c5a16edd89f8c175414d456967fe04fe21e25fbfee75f4747345","sha512":"30cca24160437799c1f3abdadc3674b829171d680a4f77540dc3f3ec240d74216551b0f1e6ac4b0768e9120e59c4850a1d940752f35a39667a0a0b8938285997","ssdeep":"","tlshash":"f421e1071ca2647976e5217b563fa9d93549d3012448cc21f889c57c6f90dea0e6add8","size":1118,"data":"","first_seen":"2026-03-09T14:08:14.115058Z","last_seen":"2026-09-22T21:13:15.668138Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/#/home","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"795274246e741ea3d448a14c71d209b9","sha1":"a35cbadd65b5855c1e603f7ccb011e974ebf39b2","sha256":"aaf3c8326987392a77728d204a8b98fd50b1736dd593f1bbbda68af8759b86c6","sha512":"f441b644f48bf7a7d540e297a6540194b9980a77e99cdb8f33e07c07a09f24717347fa5e05b3ab78dddeda8784588e89e55dd0d79c2487e8af7151ed75dc3744","ssdeep":"","tlshash":"eef00281f2b49c28194049764cc714acf5710b775a4d3c7df3a6b0503f4d85b083e56c","size":643,"data":"","first_seen":"2026-07-10T15:16:49.503945Z","last_seen":"2026-09-22T21:13:48.434026Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/ja.b7cfc421.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"af0e713ca9a01654a5eb45ebeb146e81","sha1":"f87e90a17a3b633f17429d9c0d95f5f146558d6e","sha256":"94c7850adda10a0cba0cb48ce8fb3413c4e4046a2bd987ec7025ca8c9a07b5ea","sha512":"eef680cca7218ba231a7c1b786cc603c7428586144755aa5d4ada309be55d5b1ee5a72b072a6bab2d142a161466578a6aabf379312eb7ab8f30336ea84aa8473","ssdeep":"768:8V7AqNaUht1ffAGfUj3yEKaJyw0cya5g5rWpp3BnHl2eZDfrh6U9sPfyxnPaXdw8:Kfht1ffAoUj3yRTa5gi3BF2eW8CDSE","tlshash":"2da3ddefbc4d097f48b7469efe426a4768f05a0d1265f62f5ba8b6b23e10052534372c","size":99199,"data":"","first_seen":"2026-06-09T18:59:45.537786Z","last_seen":"2026-09-22T21:13:48.424295Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/code_project_plugin_g175k1d.js?t=1790111524943","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"86698fd84bfc45e1d1a0046ae385bc3e","sha1":"c3e1bf145eaf0e8f68a8dfa2359a7e719ca4ee2a","sha256":"d6bec0099cae6c62866e835def82a3c538beed00cd76e3a97927bb340cf6e815","sha512":"538a8afc65110dd9deeb1675b6533a05d0a2d606ee89bac249da87a84b5f463c69833adda39fd94c065584e1112fc32e1385fdcf1a20d2d5e7dc5af2f1dd23d4","ssdeep":"","tlshash":"de80041403155017047f05140111134333d4535015f050110131d01d75705d741d144c","size":36,"data":"","first_seen":"2026-05-14T12:23:11.039703Z","last_seen":"2026-09-22T21:13:48.376231Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/customer.min.js?1790111524874","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ecb1aa6f5440d1d93addaacb61abd14","sha1":"d42e1dc9c18cdc20019111cb12552aac58b0f540","sha256":"f83ee3823ca3c5a16edd89f8c175414d456967fe04fe21e25fbfee75f4747345","sha512":"30cca24160437799c1f3abdadc3674b829171d680a4f77540dc3f3ec240d74216551b0f1e6ac4b0768e9120e59c4850a1d940752f35a39667a0a0b8938285997","ssdeep":"","tlshash":"f421e1071ca2647976e5217b563fa9d93549d3012448cc21f889c57c6f90dea0e6add8","size":1118,"data":"","first_seen":"2026-03-09T14:08:14.115058Z","last_seen":"2026-09-22T21:13:15.668138Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2a24589f72329295cd9954b8b82a78b","sha1":"3b1482bf7159d1e54a185a01cb2db86d259fdb02","sha256":"838e3b0575859be8808c4dce8ed176f31f15fbaa523acce88142092a0ea4d30f","sha512":"d576d5b01b5aeb6c4c9bf2c79a933542a273aa726b141d4cc40300f8ce6a6bf8d96a03061251763b8a1ad26fd582d3f17e00bb8ea1ddc43ea10170c7137b7a1b","ssdeep":"768:8E2fDPXd5rRshGxhh4j/qDyxpXajik2qrI/7a:8XDFB1D8ir+m","tlshash":"8433d8c4b1a120a543e7a1b1516f460a733fa82c554c816cb768daf22cbcdc97637fb9","size":50154,"data":"","first_seen":"2026-05-14T12:23:11.064394Z","last_seen":"2026-09-22T21:13:48.406111Z","times_seen":457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"saxox.cc/resource/images/common/home/Selection-b.png","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.299Z","timestamp":1790111525299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /resource/images/common/home/Selection-b.png HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=5,i\r\netag: \"6a2d7c4c-1ad1\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VS%2BqTEstb1dyLwK%2BFLUW93bxXb6R3AC4r%2BsmjDp3JtkmOIECK8Up86YsKFv5QSyVxl5b8cdLzYfIGZYLrXNFwudJ0FASqjAqBdNJWC6l9IWMOo6sEJcrBsGJ1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e4918aac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6865\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6865,"size_decoded":7547,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"780fc0bba0436d2e007810a0ab31b50e","sha1":"a8aeac9b0b51d65393aaea9dbeacd6c281cfcc64","sha256":"4bd0177dc9f6cfbfab5d3df02ec5bb397b1410cdaaaea2dab787e54e30a3ff3c","sha512":"98a4061779796f16b22fb27dbab9fbd2e1c13ea3aac362e9db0f1062f2f5292f568ff1eaab9ac49528922ec842c35fa16e0a80a8bd4edef1f41b5c613290f926","ssdeep":"192:IjMvFrdgXf5H6fSoOOgZPAsps7URrsphkuD5HFlJiCCF0Soa:IIvxdgXfwoBaU1sbbD5HFlJaFCa","tlshash":"1be18dc00a1d9e9aa83f7cb5089606a24790752b62d66aa65dda86ea30f9c34244c397","first_seen":"2024-08-19T17:34:46.61216Z","last_seen":"2026-09-22T21:13:48.430666Z","times_seen":172,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/55a9f80e9b3f418f/modern-runtime-probe.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.362Z","timestamp":1790111525362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/55a9f80e9b3f418f/modern-runtime-probe.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 850\r\nserver: AliyunOSS\r\ndate: Thu, 17 Sep 2026 09:46:53 GMT\r\nx-oss-server-time: 2\r\nx-oss-request-id: 6AABB70DF9AF893134C585D3\r\naccept-ranges: bytes\r\netag: \"B328EDEF916CC7BF1FDEB389B5661D07\"\r\nlast-modified: Thu, 17 Sep 2026 09:41:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1234926626382590416\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: syjt75Fsx78f3rOJtWYdBw==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: pps44TOEHoPmtUdweP6ki7cstvyeJUFNO2cxbwQTQHQfFbCTWtB79Q==\r\nage: 473112\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":850,"size_decoded":1566,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b328edef916cc7bf1fdeb389b5661d07","sha1":"be897a337114691b10789de7e814644c5c4cc493","sha256":"55a9f80e9b3f418f07b8b7cffac25b6dfa971b690da09234545508356fb8cc30","sha512":"dc48c85326afb5b2cb99df0fd5b3ca139acac8e3e6eb1f41f40162c4993bec33f39e7f2ff0d7a55a1f350a2d669af2a531755a8fe653762e006613d5f5c7daa5","ssdeep":"","tlshash":"1a01ce7eaceb30230012243a365b24287579a63711c45d8cfe8d0be44f01d384634f1c","first_seen":"2026-09-18T05:08:27.131411Z","last_seen":"2026-09-22T21:13:48.430066Z","times_seen":14,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/index.b73bb044.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/","date":"2026-09-22T21:11:57.305Z","timestamp":1790111517305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /assets/index.b73bb044.js HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:11:57 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mq25BYHnfNsuErr%2FkqCyfurcObgQHiLZ9a9ljhbqNT02aERlOrpo1Z79h%2Fhcq%2FjT6lLeJ%2FQN3kyV9%2BhfGGTk2dGaJyRtq8Zjw9WaOy07Oxlx4wZakrETfL9FXg%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4f-5956db\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e172e57c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5854939,"size_decoded":2782405,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17616)","md5":"1083ffca9ff3b1067aca3ccad6718677","sha1":"b0ed6ec6bb063ba98d2afba876292e4674deacbf","sha256":"5ca7d5cce59932f83238b2e93d89f0cf5b74dbb3be352c094d56e6ff5d329f5a","sha512":"1f92224015060b149673b6a919da3282c73c368261e18683f683566829117f9983d7536e92cf280ae0325c187370ee1774077e1d88eeedb86b226e923f23bac8","ssdeep":"24576:g2XbTtqHpcjWmF/5r52ObM7pamK+hCg9Akvk0n3DG7i:g2XbTtqHpcjWmF/5r52ObM7pamK+hP9d","tlshash":"fd254a9474a5b071a3fa45d8807b0501b32d1b49b405d4f0f1fe8eae3a6ad14a2bbf7d","first_seen":"2026-06-09T18:59:45.493537Z","last_seen":"2026-09-22T21:13:15.661257Z","times_seen":12,"resource_available":true,"data":null}},"time_used":2257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":1789,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.saxox.cc/api/common/getAllSetting","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.433Z","timestamp":1790111524433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://saxox.cc/\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V35zKtvmururWI7YpNbWtWnDp%2B8KjLEPyWl2F9Vpz9wPDRPxJL%2BVhMuY8t4sJQPleRAt7ZuzTqmWy9B5rHMvsZ6YfV2ptUP%2B0PoQVfCwdV8kA7bC2ZwTPVbC9r2vkpw%3D\"}]}\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e43be6f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":705,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/stock/META.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.296Z","timestamp":1790111525296,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /stock/META.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: kPZeE1+xrjZZlx8Qvp384N4a2qAkDhRx1VCssufsch0jP15etFTjp1QE//HLSOMPz4WhIQQ0pTM=\r\nx-amz-request-id: 85Y1BPWBGKA013DY\r\nDate: Tue, 22 Sep 2026 21:12:09 GMT\r\nLast-Modified: Thu, 02 Oct 2025 12:02:44 GMT\r\nETag: \"3059261392bf3d46bd95d3c2ef49da4e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-checksum-sha256: 87cf6e7191ffa3548f74a0449f254e73091c4aaa446986218927bcff9d567416\r\nx-amz-meta-s3b-last-modified: 20251001T122215Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 19175\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":19175,"size_decoded":19713,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"3059261392bf3d46bd95d3c2ef49da4e","sha1":"d88bfafc52e742749dd7ad47c6a4a5d6f36195a8","sha256":"87cf6e7191ffa3548f74a0449f254e73091c4aaa446986218927bcff9d567416","sha512":"fb302b6557592a9645242aa6f6203c65ffb9662734a63e410a3083f8517521e3d78865e7aaa5ab3ebc7905a324f45bd0bc73669282b36039e47b5074bf4802d3","ssdeep":"384:VbrBb7SLTRE1qo7Brm9HYmD1T660Cs5Ou23ejJ8ueZZTtGzD7wFuL7PF3:VpiBnDxT0H5OueejmGMm3","tlshash":"0c829dd7ba461ae08e65bbc57f49996bffeed4c6227010ad600f7ce9c2109408f45a3d","first_seen":"2025-11-07T06:41:56.457022Z","last_seen":"2026-09-22T21:13:48.415737Z","times_seen":72,"resource_available":false,"data":null}},"time_used":3276,"timings":{"blocked":2585,"dns":0,"connect":0,"send":0,"wait":352,"receive":339,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=e43dca6a0ff14d3fedf6b44ec870ca33\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111532303\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=67b6cb806be00fae3c58b98487db4be8\u0026_xma_=499010","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:12.313Z","timestamp":1790111532313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 18:24:56 GMT","end":"Tue, 08 Dec 2026 19:24:53 GMT"},"fingerprint":{"sha1":"BA:65:E4:51:B7:18:15:22:D7:EA:A4:59:0A:09:5F:C8:F2:8C:D9:5F","sha256":"35:D1:EB:26:89:81:E2:50:1C:FD:22:37:F8:63:7A:3D:0A:A7:62:9D:1B:DA:A1:FD:F2:25:62:B0:7A:67:A3:C2"}}},"request":{"raw":"POST /client/station/log?plugin_sign=e43dca6a0ff14d3fedf6b44ec870ca33\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111532303\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=67b6cb806be00fae3c58b98487db4be8\u0026_xma_=499010 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 427\r\nOrigin: https://saxox.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nCookie: ss_uid=67b6cb806be00fae3c58b98487db4be8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":427,"data":"data=0qHafQ8hMhHKtTc8f5KWBSI%2B03zkBQIABqlW13zwrCypyQcWPnuEPhyiyGI%2B03zkBQIAyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2FldypyGHVrhyiyhypyQj%2BPQfhMhHVPhaXDqypyGYptntEPVzErdyiyQfjI5XZlnohBdH%2BsScEP9khMhH8sntVXQVVtqypyGcW19X%2FyAKhl2VAMns9lQlkl3ljrecAs2HVl9sSs2oml5OarAsjI9yhBdHa1nohMhy9I9y9s9yklerhr268rQuVl9laM3ymMeokI9chI3HVMdHz\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 21:12:12 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3f44e74f95fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":634,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5a123bbdaf21fb1b3eaff0fa066a20db","sha1":"bf1231d47a7dfca312b6a575ee1162b766ae8354","sha256":"9d328d2b9126e5976164e3107a0d76203d38396c423818fa632e5063bb588a95","sha512":"ba98eb0e7ebdd9f723448acb750b52f35d2cee8be6befed323e3df879d67e5a488a46a3713d775e49c2231e580d40a3f6ca757d13e1ad39a50ee337231c14a38","ssdeep":"","tlshash":"b1b0122b257841034f61774d309527054160515009340316c4983341030d0d53381450","first_seen":"2026-09-22T21:13:15.663085Z","last_seen":"2026-09-22T21:13:15.663085Z","times_seen":1,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/index.58c26beb.css","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.560Z","timestamp":1790111524560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /assets/index.58c26beb.css HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:04 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bsZcKsRCfa1biOPA8B54l85jkuUfnAV4Fmg1SAtcyiSu8wdVvezNLFy6fh9ATvQujhFkh%2BdGZbsz3XOAhD6TXHvFuTFamjCtouAh92A%2B0d5rWdGPqC4%2BLLOL%2Fg%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4f-3a58\"\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e448f46c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14936,"size_decoded":3376,"mime_type":"text/css","magic":"ASCII text, with very long lines (14935)","md5":"faac1c5b9c8c7059628ca954bb5f5dce","sha1":"f9729638e6a4358c2d44f72ac75e5abe145109c7","sha256":"58c26beb2ae7204c94d49b54c88712b03c2d9b1a83c0a361f07925d419abd19f","sha512":"32c4525aa984ad71eb0647eaa20e5b59d27a26508634b7da1664c3b380ab32a8ffba28b1b651309154fb135bb7cd1bdf0852dec9a5d3bedcdaf7ce152d5bfdee","ssdeep":"96:GEE2Z4ATSDr1VqXMPGdLrPnwrYDg5O3PouNTZQ3zW8voSQStltd1kkDQ/UsDU+Vp:hE2OrGXMu2Y1ouXQ3SWoSQStllbaUy2w","tlshash":"59628458b59c2136b837e4196d98878e7042fb97880763dddc8aa96ecdc39f32738341","first_seen":"2026-03-09T14:08:14.111026Z","last_seen":"2026-09-22T21:13:48.379364Z","times_seen":49,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/resource/images/common/home/bannerimg.png","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.254Z","timestamp":1790111525254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /resource/images/common/home/bannerimg.png HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=5,i\r\netag: \"6a2d7c4c-2196f\"\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41tE%2FYfGzKGKHGUwvWoSHRiEYu5wl1o0LTo4%2B0Jg4d5bm7rCGuo%2FBIpBZ8kkI04m%2FIJi6fmqf3q%2FBHadJsGpUD5nAQbqLUPaUftq032mG8PAE8Paxsm0l%2FsziA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e48d89cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 137583\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137583,"size_decoded":138281,"mime_type":"image/png","magic":"PNG image data, 1096 x 982, 8-bit colormap, non-interlaced","md5":"81bde0f76b8d8c587f93c31ca0118911","sha1":"d7696679f1f1278787cc6242af6a2e9a9af49ccd","sha256":"b3c59f9007ae88ab2eb802cf5b2f48e0c8fd71d96e02182af7975cf0ef29350d","sha512":"c7958c6ace2b3db1cea047c4373ff2722b43da16fc7993f748dc87d6f4ddfe0946f36c7cadd76ab9e25e7e4b316636d4a208dbb1f2623ead1441676336ca890f","ssdeep":"3072:o8xzSTATdbv2PiNXSQy48F60fv1h089EECVPYTUlki5rWx6M6vD:n8ATdD1SQy48gOv1hDCmUlFAx6MED","tlshash":"46d312d39adb5b94ce0788707341af093dae6a21fdea24514089da0f55ae3b48dc093f","first_seen":"2024-08-19T17:34:46.604947Z","last_seen":"2026-09-22T21:13:48.407246Z","times_seen":200,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/waihui/bitcoin.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.267Z","timestamp":1790111525267,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/bitcoin.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: vrG+oJ1qbRMTip4ojJHYaTMwPFX4A0M0Sa0AfGz97l09jrUdssbPT55QRppXvnE9tVZVa+ypg9U=\r\nx-amz-request-id: K6G9M8N04WCMSRQK\r\nDate: Tue, 22 Sep 2026 21:12:07 GMT\r\nLast-Modified: Wed, 04 Jun 2025 15:00:51 GMT\r\nETag: \"6448b43b2e34f680e554905373a6c171\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: fb62fb35c40f699246e933b5d044a1e06a5bb087383ad2fa4c74c66eb958300d\r\nx-amz-meta-s3b-last-modified: 20240910T155446Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 6703\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6703,"size_decoded":7231,"mime_type":"image/png","magic":"PNG image data, 168 x 138, 8-bit/color RGBA, non-interlaced","md5":"6448b43b2e34f680e554905373a6c171","sha1":"e2ae7d64277a91a8a8b621090200a6d228edbb90","sha256":"fb62fb35c40f699246e933b5d044a1e06a5bb087383ad2fa4c74c66eb958300d","sha512":"76048ef297ebb44a97d68904c3e34c475cb016cf256bf88b703de4fb3cbe156668462ca20189b65ae77f88495d413bbc0aec073fa2261bd131a7164fb973df2d","ssdeep":"192:ivNELyFRfI7QO9sOz4hEZQ851wXIX5kWD:ivNs2WT9sOMEHwXInD","tlshash":"6ad1bf80062419cca8eb04624b7f1b9bfbf9d4390a4cadd3364d89e457d6f76ce202e1","first_seen":"2026-06-09T18:59:45.511477Z","last_seen":"2026-09-22T21:13:48.418188Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1775,"timings":{"blocked":-1,"dns":0,"connect":285,"send":0,"wait":312,"receive":0,"ssl":1178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/resource/images/common/home/Selection-a.png","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.298Z","timestamp":1790111525298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /resource/images/common/home/Selection-a.png HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=5,i\r\netag: \"6a2d7c4c-fbe\"\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wkniK7VAt8wW77QUZ1i6%2Bk%2FcVwOIdeFGjZCP2l35FurV4jlWf6k8aOZmNrHX7ZoD85lSw6%2BTNXp16Na8wV9u2EKY88dP%2BXqsmSMoXpVtE0Moy6%2FrRWuYP39iUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e4918a9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4030\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4030,"size_decoded":4722,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"d41eddbe11398decb778d09c35fe7c34","sha1":"5f81f58df40d09a3b8cfe3707ad3fd451c7e6859","sha256":"381aa09f34edb9c8ff2d3fb0ff09af42260fefc41c48a8e03ab14a9f2cd849a1","sha512":"e8da5839ebe24ef89aa2c7c15968a4a589303a2303329f20f44f360b62de3182cd0a431811297da1279d76cd2ec0c05da4ed13e1b587e35ba75a7f6cb3de30b2","ssdeep":"","tlshash":"b081807b352c750dcd2510742761408dc27229301ddb1079aeca6d42bd7297577603bf","first_seen":"2024-08-19T17:34:46.654099Z","last_seen":"2026-09-22T21:13:48.429455Z","times_seen":170,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/stock/AAPL.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.263Z","timestamp":1790111525263,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /stock/AAPL.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: DtgAujlTYM55ShpDJcOwTiMDlug+ecrdvUR7nMohEGdj7urM0XYddAhzTnZdD1D8HXeTw68fy14=\r\nx-amz-request-id: K6G68RGQCMZNY6N0\r\nDate: Tue, 22 Sep 2026 21:12:07 GMT\r\nLast-Modified: Thu, 02 Oct 2025 12:06:08 GMT\r\nETag: \"d5f2f45d2c3579b691870dac1fcb78d5\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-checksum-sha256: 77969c30d24a10524d90348595bd34b9d90f2dc7b5116fd20c4cfe23b0662ce4\r\nx-amz-meta-s3b-last-modified: 20250930T124003Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 4538\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":4538,"size_decoded":5075,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"d5f2f45d2c3579b691870dac1fcb78d5","sha1":"255fd1926569673d5549364fe59716cdab1008af","sha256":"77969c30d24a10524d90348595bd34b9d90f2dc7b5116fd20c4cfe23b0662ce4","sha512":"ac734b81f8fd2fb53e55e75c7982964cd6abe5427d9f72e36ecdadd735bc7fc3168a65e3ee6b98eee232001ad5611d6b4c640f18ce4339f001428a71b7e39e0c","ssdeep":"96:5S8LkJvUtV0NpB6XnBGT4hUfimCpa+X3uwYTnq8oxiTj:5S+kpUtSpB63B64K6Paoz8F","tlshash":"b3916bf682d49c8bdcaec636c0c34bd1d2b7052d9bc2956d419bd5240e76095fc794c7","first_seen":"2025-12-02T03:08:10.425893Z","last_seen":"2026-09-22T21:13:48.42558Z","times_seen":134,"resource_available":false,"data":null}},"time_used":1819,"timings":{"blocked":-1,"dns":0,"connect":292,"send":0,"wait":321,"receive":0,"ssl":1205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.saxox.cc/api/notice/list?key=ROLL_NOTICE","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.342Z","timestamp":1790111525342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://saxox.cc/\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aKtLyr8WppLx1jMdtsVPuOs%2FdXcGGNxjs%2FjO%2F7nzAsPmxo06KdaDIcIDJgPjHADhcg6RJML4Rr5MrxR9z96thi42cwRuFWVDY%2FPoroX9UkFnSiOvShT45t6oo5Ia9Us%3D\"}]}\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e496f815ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":707,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/CommonMethod.b79fc123.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/","date":"2026-09-22T21:12:00.744Z","timestamp":1790111520744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /assets/CommonMethod.b79fc123.js HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:01 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=duQWmd4HnQVKV0JCsa94muUPhu6ZB90sxvtRceEj0cON1pj9Hd3VhB3UQw%2BVCWd11DXOcuMb1IVnA%2BRoE%2BoWXcuQF0hQ%2FxfDoRzTHtwSORAGXpjCGNdEn6cfWA%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4f-367\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e2caabec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":1183,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (870)","md5":"3117072cb793580713c1eb83c79477a7","sha1":"24719bbae2582ee1451a0675faeecc2072f0e479","sha256":"21be9c26a43cf8fb09259a7f9767394de4cc7116931ec0519d754e22373f4a6f","sha512":"4776242496161290e853e7f05ee650dcbdffbdfa85b3bce65f6eab7cabd12ed74f4acedb5cc724a9c31ae6fd3df11e2e10e41302ba4678f2a80c3de5725f8162","ssdeep":"","tlshash":"111100d0e48dfb291328db69a1208033f25d48b51e288764d0f95d717b29449b79ea24","first_seen":"2026-07-17T15:46:52.079696Z","last_seen":"2026-09-22T21:13:15.66666Z","times_seen":10,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bin.bnbstatic.com/static/assets/logos/USDC.png","fqdn":"bin.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"143.204.238.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.288Z","timestamp":1790111525288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:29:07:B7:62:60:DE:32:86:85:53:F3:8D:43:DA:AF:EE:E5:2D:F2","sha256":"05:67:4B:1D:6E:C2:12:63:26:54:49:54:FE:D6:78:50:9A:6E:2E:D2:DE:4C:79:38:F3:03:BE:C3:48:8C:F5:F2"}}},"request":{"raw":"GET /static/assets/logos/USDC.png HTTP/1.1\r\nHost: bin.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1390\r\ndate: Tue, 22 Sep 2026 13:27:05 GMT\r\nlast-modified: Thu, 06 Jun 2024 17:24:09 GMT\r\netag: \"4a0e5e239b274e9ec4a17ac738ab46bb\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-autocompressed: true\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: LMAigT3VdSbYQlD0RdT_CyzcgN1amCKd\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b418063dcc03162b1d63103f1a01b6a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: LetexO0UqWbs1_g7ooFVnnLp4t_xgTinFTbMsmGJvw4h1U3kMviSFg==\r\nage: 27901\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1390,"size_decoded":2039,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"4a0e5e239b274e9ec4a17ac738ab46bb","sha1":"ba18ca71aeb54d5d2b3f197fdf2bb9b7ecbacab7","sha256":"1cb080bee7d509d8ec9e8eebbd89fd838c36fab0438dedf3d178158fff34eabe","sha512":"0b88ef9224480bde1211e74ee3c32dcb9f36b7dd185c1b22871aa8dee3581c04944964c867bc7c83fcc81337a2a78f0d86d40b2501fcb7e85e17a2b07cd2b826","ssdeep":"","tlshash":"f4210be3c3569f41f71e9ee6c1d809e61c24b441b02127529f05ba15dd2cbc4a6e2fc7","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-09-22T21:20:20.03385Z","times_seen":423,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/charting_library/charting_library.min.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:03.096Z","timestamp":1790111523096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:03 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n6NsE4y09jZgrQcBSLZMHgYAhhEil2WxJvNPGWwxQDVKMRwdo3gnfTN5%2FsDSL7Uk0On5fTXlrUsP0lT57yIDmBEHmn%2BIFujb1a6OUcqGXAP2o5zd%2FbQcz6Kw6w%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4c-2a6b\"\r\nage: 5\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e3b5d38c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":4012,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-22T21:20:05.469276Z","times_seen":7335,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/customer.min.js?1790111524874","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.884Z","timestamp":1790111524884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /platform/saxo/customer.min.js?1790111524874 HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6epmMyfBMaIQNQEs44p8LiUKeNARILPQuJH6tGb4T25aFA5C56C6mSVxhICOyNAQgY%2Fp56Qe7NHf4OJhR7lpuvOc1sUtMvXPyXKzLD6aQWaHzWV8KNZ2E7ZtfQ%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4c-45e\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e468ff6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1118,"size_decoded":1317,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7ecb1aa6f5440d1d93addaacb61abd14","sha1":"d42e1dc9c18cdc20019111cb12552aac58b0f540","sha256":"f83ee3823ca3c5a16edd89f8c175414d456967fe04fe21e25fbfee75f4747345","sha512":"30cca24160437799c1f3abdadc3674b829171d680a4f77540dc3f3ec240d74216551b0f1e6ac4b0768e9120e59c4850a1d940752f35a39667a0a0b8938285997","ssdeep":"","tlshash":"f421e1071ca2647976e5217b563fa9d93549d3012448cc21f889c57c6f90dea0e6add8","first_seen":"2026-03-09T14:08:14.115058Z","last_seen":"2026-09-22T21:13:15.668138Z","times_seen":20,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.924Z","timestamp":1790111524924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Thu, 17 Sep 2026 09:46:54 GMT\r\nx-oss-server-time: 3\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AABB70EE5F80536393A8685\r\nlast-modified: Tue, 01 Sep 2026 02:49:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14896938545536636896\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: +ZiCBLRlxfKRzeVsc2e3HA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: _AC1Cg6TAFiYe429GGeoe934iAkVnpjDUDq37NWNx5WDf43Yd2UJhA==\r\nage: 473110\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1578,"size_decoded":1432,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1578), with no line terminators","md5":"f9988204b465c5f291cde56c7367b71c","sha1":"bbfd28ec48085b50f7bf2d29ce360dedc0b67065","sha256":"e4348a3c9d1a33865ad565906a0e10b77b8acc216cf0b01c9c48c66a562dd1fc","sha512":"62c249d781fcf4b691433075224a2cc8cfce86837afc7f02850689ecab62569b6aca9971cf88866e8845571494b6ab5ee183867c3e00981418d094b078a479ae","ssdeep":"","tlshash":"6f31369836e5f8a153d76568013f8045f3ba08651879f4e0d3a9ccb9bc34c8d4073f5a","first_seen":"2026-05-06T06:21:51.036806Z","last_seen":"2026-09-22T21:14:40.560783Z","times_seen":649,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.saxox.cc/api/common/getMt5Amount?coin=xau","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.069Z","timestamp":1790111525069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://saxox.cc/\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zra0salrum4UAq9YBuBwWA45sPGHeHiet%2Ffbz2HWw1yjYEg0cpolkKR%2Bns7Loonv2cMskcvMIZ5HAAqzrIdntmdSRIKLCe8j%2BlMWsZYhkO0IWhlrXQVXX4e0oStZ1pU%3D\"}]}\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e47bf3e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":705,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/waihui/ripple.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.269Z","timestamp":1790111525269,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/ripple.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: XGq/JIjPBd/biJ9kFTxNld5iLCILLv3rY2cOPrZ00g9nV+Dd5kb5C999w08LuVwQhfMFGQilJV8=\r\nx-amz-request-id: CADJ43EGQ5WM39AK\r\nDate: Tue, 22 Sep 2026 21:12:08 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:36 GMT\r\nETag: \"674b0999f6083084a2a4b1d8b20f3bc1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 2274\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2274,"size_decoded":2802,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-22T21:17:26.901992Z","times_seen":6701,"resource_available":false,"data":null}},"time_used":2162,"timings":{"blocked":1850,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.saxox.cc/api/option/rules/list?key=EXCHANGE_INTRODUCTION","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.301Z","timestamp":1790111525301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"POST /api/option/rules/list?key=EXCHANGE_INTRODUCTION HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nAuthorization: \r\nSatoken: \r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 31\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":31,"data":"{\"key\":\"EXCHANGE_INTRODUCTION\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jv43TYeX8NQXBPkqNs7j65EDgNoB5WrThuUHPPiY5XZvie3IsrNufE1J4pTtxYYxN44ll9IFzhpWAIcEGXZFBsATnQSzVOXzuVhQyoDMz8HyeneBGdhPJ0KTeOZ%2BQZY%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e4bf80b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":870,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1b9a855123642275de337222b9462a9c","sha1":"794ad693eff3361a9c3bdccdd9911f04dbc96571","sha256":"5271e09c2aaba2805fc2f178cddc490385076f5e0eba9f6f30b80fa4395bb747","sha512":"d828b8070062280681bd994823de7c2e0fdda2b079d5da88a0fe8a9466da3555503873f52292e7d830ad47b762067f3faa146c14eb6d79544c70c1d653013056","ssdeep":"","tlshash":"459002551c189642a88300a9d506524400243160263492584c59512581881622440858","first_seen":"2023-05-12T20:49:51Z","last_seen":"2026-09-22T21:13:48.416719Z","times_seen":382,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/core.esm.b4c18107.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.558Z","timestamp":1790111524558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /assets/core.esm.b4c18107.js HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNs%2F8n5SBL%2F8%2FFwFDo%2BkNc7cPkE23gM0wnQCw5waGhbzllfICHnuGflujMaRITOzLwDgFCYHo%2B7g%2FqnbZ8BBMYwQke1xRpPZ37lPzeMWYRS5j1AZJJvKeBLuYQ%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4f-9e43\"\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e447f45c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40515,"size_decoded":13019,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39692)","md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-09-22T21:13:48.419739Z","times_seen":136,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/stock/JPM.jpeg","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.291Z","timestamp":1790111525291,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /stock/JPM.jpeg HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: r6T0JAQTj3LadDowPRAjwtUBjq4PpRo9v6narO93x2xQkbR0JcS31kfI++UT6rc3fhCEHTImuJQ=\r\nx-amz-request-id: 85YE3VKVHDX2TGBM\r\nDate: Tue, 22 Sep 2026 21:12:09 GMT\r\nLast-Modified: Thu, 02 Oct 2025 12:02:14 GMT\r\nETag: \"42c29c4459052649544fb67ef0d62e67\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-checksum-sha256: 67e50e97152d837647bc9f1237d1649fe37c635ff9d12e7d8a478eb9aff4be53\r\nx-amz-meta-s3b-last-modified: 20251001T103244Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 4208\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4208,"size_decoded":4746,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3","md5":"42c29c4459052649544fb67ef0d62e67","sha1":"20b7f1fd2e1d3c75f8a52f35ebd0d3341fb47263","sha256":"67e50e97152d837647bc9f1237d1649fe37c635ff9d12e7d8a478eb9aff4be53","sha512":"02a48088c0919c58ec0c8bdc1d8c96f58e1149ac5a4fae3013e97add71b25c349cb2ca15d2ffbd36c82880bb8b2a8a07a5f389f49d39c6ed988d01f7d40a7c28","ssdeep":"48:UMjJ8XoEhwiG5sLZZ0uthjCjdvIEE/mMW9OKoytYikwadO0rQtp6g6B14mOdxEbD:7jJ8XoxsLrfcvIE2SAytYE0cvznm3/","tlshash":"3f915d3faa614af9f8345277417d8d203fe409846d6a62ff18e65f10941d0ae08a0b92","first_seen":"2025-11-27T15:46:34.743095Z","last_seen":"2026-09-22T21:13:48.412667Z","times_seen":55,"resource_available":false,"data":null}},"time_used":3764,"timings":{"blocked":3455,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:03.094Z","timestamp":1790111523094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Noto+Sans:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 21:12:03 GMT\r\ndate: Tue, 22 Sep 2026 21:12:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6340,"size_decoded":1434,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b75d27687a21c4b72f4989a39e5c7264","sha1":"f6ed9fbcaec50bd8aa5e887db9a9a84163f04110","sha256":"cf3312886f57bb7a94363d780e242890d34ea132e33a55c005bc35b4343c2e56","sha512":"53fbf921dc3be172163a0bb72d7507111d8dc1d6e9af731b6f0a84d28445af5c0785e2ccd9997f5a221b6d24172c1b80eecbb09a47558134e80ff371f577a29e","ssdeep":"96:bOEbaqLOEbaCFZyOEba/OEba+OEbax3iOEbaIgOEbafJc+umOEbaTN2OpbaqLOpB:Mq8qg9x3xI/7WSqRbVox3cIO7HC","tlshash":"e1d1caa8805bc484ba434cd637df7d36ad1f61212454d27c9bfd59989cabc39433178e","first_seen":"2025-09-11T17:29:37.380652Z","last_seen":"2026-09-22T21:13:48.395738Z","times_seen":16334,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/stock/TSLA.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.261Z","timestamp":1790111525261,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /stock/TSLA.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: SsA1YTKcUdop591h4wP7aU0aSiB1EDiGTPX5KQ4YVGPxnGrKeOIr7F4PRkwnhcX3AWeywAeGWVE=\r\nx-amz-request-id: CADZF3DDPSJWW38J\r\nDate: Tue, 22 Sep 2026 21:12:08 GMT\r\nLast-Modified: Thu, 02 Oct 2025 12:05:18 GMT\r\nETag: \"1546bb8e1c2e58828a74b2830b0d0fd3\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-checksum-sha256: 432ffaec5ec4d5351ac4ee6397de8a068c0025dabcf2a439f7ce712a26a2f7bd\r\nx-amz-meta-s3b-last-modified: 20251002T093004Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 13615\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13615,"size_decoded":14153,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"1546bb8e1c2e58828a74b2830b0d0fd3","sha1":"9f901b8efeecf8ad8f3b9200abff1c7932de1573","sha256":"432ffaec5ec4d5351ac4ee6397de8a068c0025dabcf2a439f7ce712a26a2f7bd","sha512":"340690fbe8ad96b94eacd3af0ca4a2229a20e106c67733fe03799d3bbf2084e1fbafa136d2ab24b5e98d1f733aa54ee4bf08433aa56c34e914ba43601ace0abf","ssdeep":"192:sS+kBxE///a///////Qw6n+Xa+XGTWeDzOEsMHxzGve9VqefD2oiiKCKr7VSsfZt:r++xLL3GTuRauezzLpJNKdf+59w","tlshash":"ec523a1364220d9e73bfdae15c4d49f3d28bbed2d6860c63b73452cd18d768d62102ae","first_seen":"2025-11-07T06:41:56.573175Z","last_seen":"2026-09-22T21:13:48.415037Z","times_seen":50,"resource_available":false,"data":null}},"time_used":2358,"timings":{"blocked":-1,"dns":0,"connect":335,"send":0,"wait":337,"receive":329,"ssl":1357},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/waihui/coinInfo.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.282Z","timestamp":1790111525282,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/coinInfo.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: GgXqgt0h4bzUCFkAuJU4PX2uPOAaCYI5VJG6Tkk8VCkhMwcznaQzcTeZemqlKBm+ZpL4oWDtSkU=\r\nx-amz-request-id: CADZ8APJDH7EB573\r\nDate: Tue, 22 Sep 2026 21:12:08 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:35 GMT\r\nETag: \"48384a67185dbdfeef3aa43c99d3319c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 55728\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":55728,"size_decoded":56257,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-09-22T21:17:26.896298Z","times_seen":1015,"resource_available":false,"data":null}},"time_used":3612,"timings":{"blocked":2159,"dns":0,"connect":0,"send":0,"wait":306,"receive":1147,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/stock/BA.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.290Z","timestamp":1790111525290,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /stock/BA.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: llGRlzNMwvfxrFT1Be/TukdB2T84p01Dz6EFXl2EnFf2a66R5eOH2u4N7a7o0Uyr9pPz4xkp8/s=\r\nx-amz-request-id: 85YAHK4WQMMPCCRG\r\nDate: Tue, 22 Sep 2026 21:12:09 GMT\r\nLast-Modified: Thu, 02 Oct 2025 12:06:55 GMT\r\nETag: \"61ec1c5b2ff49017a7f7e1fb90ed849a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-checksum-sha256: b82ab1ada2b1b59cebd4ffe2b165b5fbd64da3c8dfbfc351ad86ec5f06c38aa0\r\nx-amz-meta-s3b-last-modified: 20251001T024317Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 100854\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":100854,"size_decoded":101393,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"61ec1c5b2ff49017a7f7e1fb90ed849a","sha1":"cd1b9f81de0c77133bcb94b61be96e8b8f26c2c2","sha256":"b82ab1ada2b1b59cebd4ffe2b165b5fbd64da3c8dfbfc351ad86ec5f06c38aa0","sha512":"e0026e16dbe2be1190faaf868f7c3db509e30350af39a118f181b41c5a8dba261c78ccae4fbe0e3ab30559ddc741101d6bbea9f2fc9c810dac35fc21d1cd9890","ssdeep":"3072:I7J0fLIvkDCjIGbyBiktAIWvqCvyio1OslhO:I+mGCl2iwaI1Osq","tlshash":"b1a3127f7f79dac95a6b2d28e1473741278a921257e006e82048cf69c39d3bee60cc48","first_seen":"2025-11-07T06:41:56.474224Z","last_seen":"2026-09-22T21:13:48.426943Z","times_seen":48,"resource_available":false,"data":null}},"time_used":6965,"timings":{"blocked":3314,"dns":0,"connect":0,"send":0,"wait":704,"receive":2947,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/stock/MSFT.jpeg","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.283Z","timestamp":1790111525283,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /stock/MSFT.jpeg HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: /GvyZdfWqvftAvOgcbni74MeQFCJHjrTSlOnjox2pZ9mnSUavR7pd2t8BPK0RPrQVdYAI2VTunc=\r\nx-amz-request-id: 85YFFWB32SYSBVS1\r\nDate: Tue, 22 Sep 2026 21:12:09 GMT\r\nLast-Modified: Thu, 02 Oct 2025 12:02:54 GMT\r\nETag: \"89a0727a070d369a8383af77d0f53e33\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-checksum-sha256: f5ca68de7bf695358effb5c44931823842df668183f85c7b33d2c449d3fbf0c4\r\nx-amz-meta-s3b-last-modified: 20251001T125016Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 6408\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6408,"size_decoded":6946,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"89a0727a070d369a8383af77d0f53e33","sha1":"20ff3ec579913a5468ba6506a9a874d1375b55b8","sha256":"f5ca68de7bf695358effb5c44931823842df668183f85c7b33d2c449d3fbf0c4","sha512":"2f16222a71a2f6ed84505a938cb0caa10ba0e1b015ef06afa487ca08a6eddc4caaf531e64e250778960c85ce752addd3de54a1f97fc180ff510eb71f66a6fc26","ssdeep":"96:X894vagCAAAAAJwVg11111EaSBSj/MaBFFMJzeBGCfmeBH7tL:sfgPiBSjMETMqGCJtL","tlshash":"7dd1095a5e61c39af36f1b7a8f1046b8ef671c34a24d45aff7830828e71e0f140546c6","first_seen":"2025-11-07T06:41:56.55326Z","last_seen":"2026-09-22T21:13:48.399106Z","times_seen":63,"resource_available":false,"data":null}},"time_used":3629,"timings":{"blocked":3280,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.231Z","timestamp":1790111525231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:04:33 GMT\r\nexpires: Tue, 21 Sep 2027 16:04:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:23:36 GMT\r\ncontent-type: font/woff2\r\nage: 104852\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35928,"size_decoded":36741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35928, version 1.0","md5":"a317875aac104234bd7c39df8c501fbb","sha1":"870661970316f61acaab613e3209b9c09e2961f3","sha256":"065e2ab41209dcd60b1c88517c71a741803e3b0647059cb8ee7efff522ed1d40","sha512":"619f405a133ec8227767f08c598399a737d30cea6f76d3c065d2d97ce162bae040ced7fca13ed874d66a1f98472a3a07cf12bb146f432c8d4df24745488e13d0","ssdeep":"768:ybZHErhpxKts8YgN3IJe53ZnJREjqvYSVgXsdp+v0Gd:ybxErktsfgN3fXlicOzd","tlshash":"bef2f11c1a34eb974328047b840084b533ea6da7d63192b121a5fb44cca46fafecfdd6","first_seen":"2025-09-11T17:08:53.61315Z","last_seen":"2026-09-22T22:47:23.657647Z","times_seen":31652,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":22,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.saxox.cc/ws/3c5cc221-e494-40ee-8454-7dc6f1cb492d","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.409Z","timestamp":1790111524409,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /ws/3c5cc221-e494-40ee-8454-7dc6f1cb492d HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://saxox.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 87Y5Fbk223z9bAQQr87vKw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 22 Sep 2026 21:12:04 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://saxox.cc\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: QxYfANpCSpgxVCt0Y5+7jW7ZjzI=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bx6HfOhhqo4%2FOSeGX9yn5bULx4AQDK3YYQ8sD2GZ1aY%2BWobNqB198iTEM9NIH5rc6xV2gEahQOCaryxWyRVFL3NHh8Jyz7B2jVHZVMpC1QgFktORLpbcHym%2Fs9Gk178%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a3f44e439fffc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":869,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":0,"connect":2,"send":0,"wait":386,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.541Z","timestamp":1790111525541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Mon, 21 Sep 2026 18:07:31 GMT\r\nx-oss-server-time: 17\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AB17263AA0DCC3731CA062E\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Thu, 17 Sep 2026 09:41:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12708522076119217507\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: 8qJFifcjKSlc2ZVLi4Kniw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: fjMvQ8P_xLzy8NlE1LDjZNlreuYhYLZyiYYbNJSY1jZoE-ilpbU72w==\r\nage: 97473\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":50154,"size_decoded":16351,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25425)","md5":"f2a24589f72329295cd9954b8b82a78b","sha1":"3b1482bf7159d1e54a185a01cb2db86d259fdb02","sha256":"838e3b0575859be8808c4dce8ed176f31f15fbaa523acce88142092a0ea4d30f","sha512":"d576d5b01b5aeb6c4c9bf2c79a933542a273aa726b141d4cc40300f8ce6a6bf8d96a03061251763b8a1ad26fd582d3f17e00bb8ea1ddc43ea10170c7137b7a1b","ssdeep":"768:8E2fDPXd5rRshGxhh4j/qDyxpXajik2qrI/7a:8XDFB1D8ir+m","tlshash":"8433d8c4b1a120a543e7a1b1516f460a733fa82c554c816cb768daf22cbcdc97637fb9","first_seen":"2026-05-14T12:23:11.064394Z","last_seen":"2026-09-22T21:13:48.406111Z","times_seen":457,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.saxox.cc/api/common/getAllSetting","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/","date":"2026-09-22T21:12:00.622Z","timestamp":1790111520622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://saxox.cc/\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=inBIswpAhWWibwfHyTJxdGbwWdfIivWlMlYm3cUiixJT%2B7TC9R9immfCG8i5gFeCaP1z87vUXfJzvfOuqS5cYutMz1BanOZohkfKZVsAixvPGJheWpoIcoom9lkoPN0%3D\"}]}\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e2bf8145ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":701,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/ja.b7cfc421.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.073Z","timestamp":1790111525073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /assets/ja.b7cfc421.js HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/assets/index.b73bb044.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=54%2BNPGkE7vBadu%2BcMPE3ICvTshLhNAM2iKaZWjtlGKZGKmj5vodgR7AsovBEkyqAW7GSATdD2z7zbXcpebQHcHzW%2Bm1aTbO2OeEvk1UxES5zLyzSCn7J%2FivMvw%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4f-1837f\"\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e47b81dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99199,"size_decoded":25383,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"af0e713ca9a01654a5eb45ebeb146e81","sha1":"f87e90a17a3b633f17429d9c0d95f5f146558d6e","sha256":"94c7850adda10a0cba0cb48ce8fb3413c4e4046a2bd987ec7025ca8c9a07b5ea","sha512":"eef680cca7218ba231a7c1b786cc603c7428586144755aa5d4ada309be55d5b1ee5a72b072a6bab2d142a161466578a6aabf379312eb7ab8f30336ea84aa8473","ssdeep":"768:8V7AqNaUht1ffAGfUj3yEKaJyw0cya5g5rWpp3BnHl2eZDfrh6U9sPfyxnPaXdw8:Kfht1ffAoUj3yRTa5gi3BF2eW8CDSE","tlshash":"2da3ddefbc4d097f48b7469efe426a4768f05a0d1265f62f5ba8b6b23e10052534372c","first_seen":"2026-06-09T18:59:45.537786Z","last_seen":"2026-09-22T21:13:48.424295Z","times_seen":40,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/customer.min.js?1790111524403","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.407Z","timestamp":1790111524407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /platform/saxo/customer.min.js?1790111524403 HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBdO7aCeKVoc85z8ZA762FjcCMfn9Znu2SvCMuWA6O2EASoeYie%2FyIoMpDeVSzsc0v%2FFq7mS4On65Ei6sf6%2F7XhA5Hp6C1DtttZSBjUrzyww6kNE0YrcDgYmVg%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4c-45e\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e438f04c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1118,"size_decoded":1321,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7ecb1aa6f5440d1d93addaacb61abd14","sha1":"d42e1dc9c18cdc20019111cb12552aac58b0f540","sha256":"f83ee3823ca3c5a16edd89f8c175414d456967fe04fe21e25fbfee75f4747345","sha512":"30cca24160437799c1f3abdadc3674b829171d680a4f77540dc3f3ec240d74216551b0f1e6ac4b0768e9120e59c4850a1d940752f35a39667a0a0b8938285997","ssdeep":"","tlshash":"f421e1071ca2647976e5217b563fa9d93549d3012448cc21f889c57c6f90dea0e6add8","first_seen":"2026-03-09T14:08:14.115058Z","last_seen":"2026-09-22T21:13:15.668138Z","times_seen":20,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/plugin-D6LAqEbs.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.614Z","timestamp":1790111525614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/plugin-D6LAqEbs.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 22 Sep 2026 03:14:18 GMT\r\nx-oss-server-time: 3\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AB1F28A0900E634363A844F\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Thu, 17 Sep 2026 09:41:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11401151812394763817\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: KNg2UYS57sHPh2y2zUIhyA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: R1PWEGosEu3tSIk-l4wE-W-WS3F34OIbE1OLU3jogulJ0_5vb9-81g==\r\nage: 64667\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":554610,"size_decoded":190844,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65426), with no line terminators","md5":"28d8365184b9eec1cf876cb6cd4221c8","sha1":"531d945508aa3aed35149761034874e75fa7c8a5","sha256":"72607b44ad2e00e07ffb76053a5b797c1f46f00852ea6a86ad17d2a9a36d423f","sha512":"bde256996f74af09d92b181d903a2929ebc99c0322470e110ab89350342706fa566435f3bc7778f469eaa17ca202dc965d8c2ede666a65daf57b67a899190f01","ssdeep":"12288:1J6bdg6akmB8LlWQaHeVQqcgVt4JSelp+SOIcFEcARLAhSMyRr3YCpLAA4zLLeJi:7qSnRVeLKJg7gLI","tlshash":"91c46c4df2a67836d3f65490a0e64444726c0b69e004c8f1f5bc9eb91772da2a3b3b7d","first_seen":"2026-09-18T05:08:27.454664Z","last_seen":"2026-09-22T21:13:48.375433Z","times_seen":14,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=19c9f62c80c1d4ca2e3f7a49315f617b\u0026chat_user_id=cda9f2edae28a3010ef7877b5a951f39\u0026direction_type=1\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111527169\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:07.181Z","timestamp":1790111527181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"OPTIONS /chat/chat-msg/unread-msg-list-v2?login_token=19c9f62c80c1d4ca2e3f7a49315f617b\u0026chat_user_id=cda9f2edae28a3010ef7877b5a951f39\u0026direction_type=1\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111527169\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://saxox.cc/\r\nOrigin: https://saxox.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 21:12:07 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a3f44e54e9870883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":557,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.saxox.cc/api/common/getCoinList","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/","date":"2026-09-22T21:12:00.619Z","timestamp":1790111520619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://saxox.cc/\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYbHoQQ9GMBtD%2BtEaaL001OJhjPZYzbkH77OC%2BdsWuVlf9XNnZ7Fc%2BZy6x0jbVIcs03ZtX7DIPFG5aAE5E2Wrv4MEwnlttBn2TnWV9NGZ%2BvVN6OyGKSWXkEaX9AUFO0%3D\"}]}\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e2bf8135ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":707,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/stock/KO.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.293Z","timestamp":1790111525293,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /stock/KO.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: CE44/KgteLTb7PkpfcVLUujjLyv26+zxJXetmOvw5jMVpa4Coht3Mb47Hm556Xa6uXoGnYUnhbo=\r\nx-amz-request-id: 85Y2NV1VSKXDS6D6\r\nDate: Tue, 22 Sep 2026 21:12:09 GMT\r\nLast-Modified: Thu, 02 Oct 2025 12:02:20 GMT\r\nETag: \"5dd04cf469afd591be963ae00be9bb76\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-checksum-sha256: 1f4807ad102fcb33020c84bd7644581d0d44cf63bbc2c3044c3472e0d21537ab\r\nx-amz-meta-s3b-last-modified: 20251001T104817Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 163290\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":163290,"size_decoded":163829,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"5dd04cf469afd591be963ae00be9bb76","sha1":"863d00b0e0ce7473661371195c62a302eaa1d050","sha256":"1f4807ad102fcb33020c84bd7644581d0d44cf63bbc2c3044c3472e0d21537ab","sha512":"165ae93d73f8fe7f55db59dfdf72a781a88629af4eea6cc95c0718347d02004fdcb99f2bb7a6e2faceba193ba1742fd5ac9cb0cdfe4a8282d6e2efd69e7e856f","ssdeep":"3072:72dKl3SVmTh5xYRGlLNAEmnpZZkl2QFC0MTs5UxoFCZjCHq1:7YUSV+h5eAlLSEmnpronC0vSxoFCJ","tlshash":"97f323caa50cee17be7f2d1f0f8ec2a851299334b5ca68fb00e7265657562b8d4cdd04","first_seen":"2025-12-02T03:08:10.451128Z","last_seen":"2026-09-22T21:13:48.373705Z","times_seen":42,"resource_available":false,"data":null}},"time_used":6427,"timings":{"blocked":3519,"dns":0,"connect":0,"send":0,"wait":339,"receive":2569,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/charting_library/charting_library.min.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/","date":"2026-09-22T21:11:57.303Z","timestamp":1790111517303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:11:57 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rl5UhnYcgxxv5buTkjZat230BE43iH429iC6te0%2Bv0WBTkYHwrA9X2Oc0a9RIhj9MQXWQPjnQZJ%2BkVTglNpb7k1Y%2Fj21g4ve4xyvd4DX87C%2FNl%2FHCIz5a0AtvA%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4c-2a6b\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e172e56c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":4009,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-22T21:20:05.469276Z","times_seen":7335,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/setting/sounds/ling.mp3","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"65.9.46.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.417Z","timestamp":1790111525417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /setting/sounds/ling.mp3 HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: audio/mp3\r\ncontent-length: 47223\r\ndate: Mon, 21 Sep 2026 09:22:19 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 02 Jul 2024 06:29:42 GMT\r\netag: \"1065fe976ff9e98d69772fe0f0d7b808\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=15552000\r\nx-amz-version-id: J6b7RzocQsVXwTzS3QxevgOr1gKTyblY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-47222/47223\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: VtOB84yjCd4aHk_8Dm4RoHvj-W3o3inUHMsoWuh6TaYXnhNY50AYJg==\r\nage: 128987\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":47223,"size_decoded":47882,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo","md5":"1065fe976ff9e98d69772fe0f0d7b808","sha1":"122193fafe8453db01635cf4502524eb93264fdc","sha256":"35fbb2ad61551e3a396591657a66b563222454418238c46005b89418556f9983","sha512":"7d0de1b98c66aaa939f56253d100f5efc36128c2b8420fc8c932f68873a643a1179411a9410125aa3ff5512f74dad1209f2e19c5a0734d4582c5b94280e242a7","ssdeep":"384:ju+iqqxhBRBJ2zjBQRB57Nsyf+/C6ufaPkm5NyxGo5Vtll9rFd1ft7FDehm:junhJdlac","tlshash":"00239434b6a108d0e14eaaffb0deb2121e771ec3cd56a84075ef78044fb1179255b8b6","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-09-22T21:14:40.54927Z","times_seen":3539,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.535Z","timestamp":1790111525535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Mon, 21 Sep 2026 18:07:31 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AB172638F02F93730C08A38\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Thu, 17 Sep 2026 09:41:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11117890345216515431\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: hROW2spQLPFFIc7LAqymaw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: slv8i_URYpMRUkQ327nb4GyNIdBgj-VpfGSbd-ml7TzIgFB3Sfrp7g==\r\nage: 97473\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":52936,"size_decoded":20357,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13923)","md5":"851396daca502cf14521cecb02aca66b","sha1":"bb13fe69b1452c392af9fcb5d6a0e8523f789053","sha256":"5c29248518f8aa0821cf4befa9c56db3d88f062e67c0efa695b1a38faaa6e7f0","sha512":"265b520f2bd1a731befe5ed42b45a93fd8e544c9a79a604ae8805319c5ecadac98c2164a47033bca294649e807252e8d1c22d7c9af04727856acaca9c665bac3","ssdeep":"768:PaBBRBSMFXGxkrCCIaPKvCz8zePMEccNeEMucEa6wPyCDYFDSTxhh+710STFR4ub:mv+w9126OIfFJSwRJFcTzA","tlshash":"43330ac9b691b06243ab60f0406f490af33a9925744c84a4f158dceb3db650edbb7f6d","first_seen":"2026-05-14T12:23:11.004494Z","last_seen":"2026-09-22T21:13:48.403303Z","times_seen":458,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"65.9.46.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.738Z","timestamp":1790111525738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/marked/v14.1.2/marked.min.js HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\ndate: Mon, 21 Sep 2026 09:22:18 GMT\r\nserver: AmazonS3\r\nlast-modified: Fri, 20 Sep 2024 06:38:39 GMT\r\nx-amz-replication-status: REPLICA\r\nx-amz-version-id: JFBntxsrfZ64VoXBE8CHtNjr4.xFrBV4\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"4726c8d370952011c5137ee8e13eb6bb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: J9sSJUmewlk4zeaDCINxTTgJoChE5jytDAkQbCbbEbKJaf3_PAh1JQ==\r\nage: 128987\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":36489,"size_decoded":11867,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36340)","md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-09-22T21:14:40.550512Z","times_seen":3018,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.saxox.cc/ws/f72e99a1-5f4d-415b-8155-7f85b3b534cc","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://saxox.cc/","date":"2026-09-22T21:12:00.598Z","timestamp":1790111520598,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ws/f72e99a1-5f4d-415b-8155-7f85b3b534cc HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://saxox.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: UJ/DTP1bJUFd456piFg9yw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/waihui/litecoin.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.274Z","timestamp":1790111525274,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/litecoin.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: CWreQrMNhJNj8N5q+Fb9Xiad+YysiK35Rg4ELLyEvfhVCGmW++6PhS3stfV7bgG4kBNvUc78TKU=\r\nx-amz-request-id: CADHNHZP4228EFGA\r\nDate: Tue, 22 Sep 2026 21:12:08 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:36 GMT\r\nETag: \"bb27c369a3aa54d9c1f8e59e1706da48\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee\r\nx-amz-meta-s3b-last-modified: 20250326T121512Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 34858\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":34858,"size_decoded":35387,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-09-22T21:17:26.920198Z","times_seen":6704,"resource_available":false,"data":null}},"time_used":2753,"timings":{"blocked":1857,"dns":0,"connect":0,"send":0,"wait":308,"receive":588,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.saxox.cc/api/option/rules/list?key=EXCHANGE_INTRODUCTION","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.335Z","timestamp":1790111525335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"OPTIONS /api/option/rules/list?key=EXCHANGE_INTRODUCTION HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken\r\nReferer: https://saxox.cc/\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8TdWPGinRljDL6AtcejYwLLAKWr8SNQrrHdt%2BvHhOOsk1hdis3S3v5CGazOspgLGH%2BkFYN%2FPieicItexeoZt%2BCrX39g6vv1CgjKalhjN6rLTrZ0tOHVCAXR54zIyclw%3D\"}]}\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e495f7a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":707,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/code_project_plugin_g175k1d.js?t=1790111524943","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.945Z","timestamp":1790111524945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/code_project_plugin_g175k1d.js?t=1790111524943 HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 36\r\nserver: AliyunOSS\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\nx-oss-server-time: 2\r\nx-oss-request-id: 6AB2EF25B676933834C8BAFA\r\naccept-ranges: bytes\r\netag: \"86698FD84BFC45E1D1A0046AE385BC3E\"\r\nlast-modified: Thu, 27 Aug 2026 11:35:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5566078588811732647\r\nx-oss-storage-class: Standard\r\ncontent-md5: hmmP2Ev8ReHRoARq44W8Pg==\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: x_7-_Da2oIbddm2w-XLq9xdwmSXp1NeBX8ZRDLDeGaI2hb1_MNKr7A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":36,"size_decoded":698,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"86698fd84bfc45e1d1a0046ae385bc3e","sha1":"c3e1bf145eaf0e8f68a8dfa2359a7e719ca4ee2a","sha256":"d6bec0099cae6c62866e835def82a3c538beed00cd76e3a97927bb340cf6e815","sha512":"538a8afc65110dd9deeb1675b6533a05d0a2d606ee89bac249da87a84b5f463c69833adda39fd94c065584e1112fc32e1385fdcf1a20d2d5e7dc5af2f1dd23d4","ssdeep":"","tlshash":"de80041403155017047f05140111134333d4535015f050110131d01d75705d741d144c","first_seen":"2026-05-14T12:23:11.039703Z","last_seen":"2026-09-22T21:13:48.376231Z","times_seen":63,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.saxox.cc/api/common/getCoinList","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.429Z","timestamp":1790111524429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://saxox.cc/\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jVJtLhVQBNZLfBcSGvdtENWg5fnaVURL19es1AQmlZdn9kg2IV6gRf7t2E4ee4vZ7Sa4lujccPhIcKdo%2FilTq9CeLxzoRNUlLXcAFVRkWrtufWbMPvU022oeGE4Ufe0%3D\"}]}\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e43be6e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":701,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.saxox.cc/api/common/getMt5Amount?coin=xag","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.072Z","timestamp":1790111525072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 3\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3,"data":"xag"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vGZmurZAY5tx9Ait71zT%2BJBrB1NgucnmmUqN8A%2BQIxJ7RncjPD6Ix1M2cv%2BqimdfuCaIvizNTIR4LOkogmmZ%2Fk%2BynTLX0xJFb4mN1js0aZ9Z%2By8gR6rRc%2FbBhharKac%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e495f775ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":873,"mime_type":"application/json","magic":"JSON text data","md5":"70adad74ee857582624d4e9e109a6e9c","sha1":"6fbabc59c3197c59cb70d0ed79fc9aa57b919ead","sha256":"19b7f4988bafa03c7c9357f56e324930fb77914805b4bed808ea57d6689e31dc","sha512":"ce03a190f7906116eaa2a0e528759bcb5d352645542386c3359d5acb2770f6baf83b25a4100dd4e395622e4dae4bebfd0d4c5387c42c5205ab8081866627d1eb","ssdeep":"","tlshash":"919002561c188252f89351b59506570420283170272d92484c599129809c2622041c58","first_seen":"2026-09-22T21:13:15.679393Z","last_seen":"2026-09-22T21:13:15.679393Z","times_seen":1,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/waihui/binance-coin.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.277Z","timestamp":1790111525277,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/binance-coin.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: R1YoNLJfr+c7CGfOMTS5p1hvR6ViW73nFZCy9n78Nyg/o7q8UguGXsivZvMRbGPbZJqOtoFOU0Y=\r\nx-amz-request-id: CADTEEF4E85XBCRD\r\nDate: Tue, 22 Sep 2026 21:12:08 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:35 GMT\r\nETag: \"a533eecdee5a789e7d94f8f79f95d588\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90\r\nx-amz-meta-s3b-last-modified: 20250326T121514Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 12869\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12869,"size_decoded":13398,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-09-22T21:17:26.895769Z","times_seen":6744,"resource_available":false,"data":null}},"time_used":2592,"timings":{"blocked":1931,"dns":0,"connect":0,"send":0,"wait":335,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=6eafc1f6d90f01631a454b74e8e5e5b8\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111527673\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:07.677Z","timestamp":1790111527677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 18:24:56 GMT","end":"Tue, 08 Dec 2026 19:24:53 GMT"},"fingerprint":{"sha1":"BA:65:E4:51:B7:18:15:22:D7:EA:A4:59:0A:09:5F:C8:F2:8C:D9:5F","sha256":"35:D1:EB:26:89:81:E2:50:1C:FD:22:37:F8:63:7A:3D:0A:A7:62:9D:1B:DA:A1:FD:F2:25:62:B0:7A:67:A3:C2"}}},"request":{"raw":"POST /client/station/log?plugin_sign=6eafc1f6d90f01631a454b74e8e5e5b8\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111527673\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 457\r\nOrigin: https://saxox.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":457,"data":"data=0qHafQ8hMhHKtTc8f5KWBSI%2B03zkBQIABqlW13zwrCypyQcWPnuEPhyiyGI%2B03zkBQIAyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2FldypyGHVrhyiyhypyQj%2BPQfhMhHVPhaXDqypyQIKsNcbtNIVfVzErdyiyQIvs2VQlQXvsnDqM3O5leO8rnsSMefSsAX%2BM2DjrAlmyh8hf3jar9V%2FN9VvyAKhr5OSInpjrdypyQuAt3VWPhyiyGY%2Br9Xn1nXSyh8ht3zZrnkhMhyjMnlmrAsqs5R8s5uvI3I%2BlQD5rAt%2BIev5l2XQIAOSshypyGXErdyiyhHz\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 21:12:07 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\nset-cookie: ss_uid=67b6cb806be00fae3c58b98487db4be8; expires=Wed, 22-Sep-2027 21:12:07 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3f44e57fb29c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"67b6cb806be00fae3c58b98487db4be8","quoted":false,"path":"/","domain":"salesmartly.com","expires":"2027-09-22T21:12:07Z","raw_expires":"Wed, 22-Sep-2027 21:12:07 GMT","max_age":31535999,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"ss_uid=67b6cb806be00fae3c58b98487db4be8; expires=Wed, 22-Sep-2027 21:12:07 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":809,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5a123bbdaf21fb1b3eaff0fa066a20db","sha1":"bf1231d47a7dfca312b6a575ee1162b766ae8354","sha256":"9d328d2b9126e5976164e3107a0d76203d38396c423818fa632e5063bb588a95","sha512":"ba98eb0e7ebdd9f723448acb750b52f35d2cee8be6befed323e3df879d67e5a488a46a3713d775e49c2231e580d40a3f6ca757d13e1ad39a50ee337231c14a38","ssdeep":"","tlshash":"b1b0122b257841034f61774d309527054160515009340316c4983341030d0d53381450","first_seen":"2026-09-22T21:13:15.663085Z","last_seen":"2026-09-22T21:13:15.663085Z","times_seen":1,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/customer.min.js?1790111520589","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/","date":"2026-09-22T21:12:00.590Z","timestamp":1790111520590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /platform/saxo/customer.min.js?1790111520589 HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:01 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEtq8jncpqjIhedInp5q1B%2BByKWvpjqCRy9GYWU4ylEnRO%2BJvAPckMzNwpsmPtmjSGeU%2BPzboY7WomQt69IZOVxCraAPTvcS%2Bv2EOvy9GemGOpG1l%2F37VUv9Tg%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4c-45e\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e2bba81c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1118,"size_decoded":1325,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7ecb1aa6f5440d1d93addaacb61abd14","sha1":"d42e1dc9c18cdc20019111cb12552aac58b0f540","sha256":"f83ee3823ca3c5a16edd89f8c175414d456967fe04fe21e25fbfee75f4747345","sha512":"30cca24160437799c1f3abdadc3674b829171d680a4f77540dc3f3ec240d74216551b0f1e6ac4b0768e9120e59c4850a1d940752f35a39667a0a0b8938285997","ssdeep":"","tlshash":"f421e1071ca2647976e5217b563fa9d93549d3012448cc21f889c57c6f90dea0e6add8","first_seen":"2026-03-09T14:08:14.115058Z","last_seen":"2026-09-22T21:13:15.668138Z","times_seen":20,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/core.esm.b4c18107.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/","date":"2026-09-22T21:12:00.746Z","timestamp":1790111520746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /assets/core.esm.b4c18107.js HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:01 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0QldhFLl8Yy2j1IJlhkhNNb2NkAIWQTMlrOWxf6YP5Rz%2FhcsF59EyEFiCOKVkjeEZ%2BD9y%2Fg6VC1oHMvvfEmwmGzxWRNolm1fnlJSNutenr5ijKNWEKoacmes%2BQ%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4f-9e43\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e2caabfc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40515,"size_decoded":13089,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39692)","md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-09-22T21:13:48.419739Z","times_seen":136,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/stock/COIN.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.295Z","timestamp":1790111525295,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /stock/COIN.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 3NVvgmKTicuv/2dBn3PT2w+Sd/cNnqzuEjDUGzmzOKpM++FBVkl6JmJZJYI5EPl3Pv1ep8o3x8w=\r\nx-amz-request-id: 8RDYFCKQNQ98AFD5\r\nDate: Tue, 22 Sep 2026 21:12:10 GMT\r\nLast-Modified: Thu, 02 Oct 2025 12:00:18 GMT\r\nETag: \"1377b172723c9700810b9bc3d21fd0ff\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-checksum-sha256: 720064aa82696de82d8ab4755b1dac3241a183c7895bce5ad7591ae061cdaf59\r\nx-amz-meta-s3b-last-modified: 20251001T044313Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 3468\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3468,"size_decoded":4005,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"1377b172723c9700810b9bc3d21fd0ff","sha1":"c2ab0992ab80f1a96d7e985b4fc6533462550d4f","sha256":"720064aa82696de82d8ab4755b1dac3241a183c7895bce5ad7591ae061cdaf59","sha512":"59c1934b9b9b037e4b61343e73c3062845400f14ec6a5c6d2e83ff77a957d0c71eb642e8d5620bf2a177dd04522608ee419acc3491af4c66d5441cde570405d8","ssdeep":"","tlshash":"22614bcd0354d3e588137df0831322ea692ba7966bf434f7d678629cc2ad72064e07c6","first_seen":"2024-12-18T23:13:17.108786Z","last_seen":"2026-09-22T21:13:48.402653Z","times_seen":62,"resource_available":false,"data":null}},"time_used":3912,"timings":{"blocked":3606,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/logo_144.png?2.0.1781365838952","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:03.788Z","timestamp":1790111523788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /platform/saxo/logo_144.png?2.0.1781365838952 HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:03 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0s%2FyEoDy1PRdwM%2B70%2BEWzlQZblRRGMPknFjuXUqUENVdky5CvuJ%2F%2Fdbn0G3H2OWYDToaa3zohZBi2EaOPxIUI9ZUik144nouYJIDir8Lh3f8%2FBIYGLimxalshA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e3fbdf5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":751,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-09-22T21:13:48.401192Z","times_seen":47519,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/waihui/tron.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.285Z","timestamp":1790111525285,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/tron.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: WrZxXQQMIrUH1IwZC/1zlc9CLIm8Bp2Zyjv3dyti3QtC+zZoxs4timjtf0QjAVbP8ucMPaRBx0c=\r\nx-amz-request-id: CADXB6C9NRFS7RN3\r\nDate: Tue, 22 Sep 2026 21:12:08 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:36 GMT\r\nETag: \"d5ca5f90c7a46cb88e5f57b2d3046ba8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 28273\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":28273,"size_decoded":28802,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-09-22T21:17:26.896859Z","times_seen":6531,"resource_available":false,"data":null}},"time_used":3314,"timings":{"blocked":2292,"dns":0,"connect":0,"send":0,"wait":357,"receive":665,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/recent-msg-list-v2?login_token=19c9f62c80c1d4ca2e3f7a49315f617b\u0026limit=20\u0026sender_type=0\u0026chat_user_id=cda9f2edae28a3010ef7877b5a951f39\u0026direction_type=0\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111526821\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:06.828Z","timestamp":1790111526828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"GET /chat/chat-msg/recent-msg-list-v2?login_token=19c9f62c80c1d4ca2e3f7a49315f617b\u0026limit=20\u0026sender_type=0\u0026chat_user_id=cda9f2edae28a3010ef7877b5a951f39\u0026direction_type=0\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111526821\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: 107adcdc48b343477b1434c4dc7ff3a8\r\nOrigin: https://saxox.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 21:12:07 GMT\r\ncontent-type: application/json\r\ncf-ray: a3f44e531b070883-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://saxox.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 1206c2d2-b933-4637-8ca6-5cfa65c24e71\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49,"size_decoded":761,"mime_type":"application/json","magic":"JSON text data","md5":"78d539ac5b6a06a8bd02b3ace8debb63","sha1":"8e22651d8d1e678777cfebdb96983cf7df6e751a","sha256":"d817b79090a73b71e09ad6e2daa2c137408a7cfb7916aef50da18a1b1b0229f0","sha512":"e821cc4e11e272ac7ff31855b135a17839c3032c8d1e2a89683b7e937ac1443f8c7732821bf10fe3f120b05c9c5325e74f6b7616a478e5ff9c98ea2519e92a96","ssdeep":"","tlshash":"5390021218281c560b06a48a74091b0591d4114049141621cd8c5158870945c6582521","first_seen":"2023-05-07T20:28:16Z","last_seen":"2026-09-22T21:13:48.409376Z","times_seen":519,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.saxox.cc/api/common/getMt5Amount?coin=xau","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.067Z","timestamp":1790111525067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 3\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3,"data":"xau"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BE59JiNJ2Q6dHegv9jhBB3ozg9df2N2wK6J%2FxCXra05Gfu0ERT9DFxCdN%2F7AVrRCh%2FUPtISgYU6c3JFGsP7VFFfxvZnpAPv1zWb%2B6%2FXiMhof9WJAq440RDP0cFgNbb4%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e494f755ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":869,"mime_type":"application/json","magic":"JSON text data","md5":"365f606357d0b925d208debb484928aa","sha1":"297ede617369fb730be3971125436e7611c88309","sha256":"86624e0d31f4a4daef147d211b6ff22d923eb034d8f0b8298f28e0b6d2618cb0","sha512":"d62ac87f6cbc9a703970c4584749210d952b316e0efea8994508d997dcb99d03dd8fe697d895500fc3e907022e722572f94aee58f298ff885301e2ef4e99818c","ssdeep":"","tlshash":"e49002591c1983c2f89300a5e9061248002831682664d2484d5a5165808c166204085c","first_seen":"2026-09-22T21:13:15.682751Z","last_seen":"2026-09-22T21:13:15.682751Z","times_seen":1,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/chat/msg-user/create-user?plugin_sign=7a04e030e17c997d20207e011dd61abb\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111526354\u0026_lt=\u0026_u=\u0026_xma_=499010","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:06.359Z","timestamp":1790111526359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 13:46:02 GMT","end":"Thu, 17 Dec 2026 14:45:59 GMT"},"fingerprint":{"sha1":"6B:52:F9:47:66:41:96:5A:37:0B:77:43:46:F5:FB:DB:96:82:F6:36","sha256":"F5:48:C0:4F:08:39:D0:49:3C:36:E9:6B:31:19:B0:0C:85:3F:85:03:4F:14:0A:44:E9:22:88:E7:1F:D5:28:8E"}}},"request":{"raw":"POST /chat/msg-user/create-user?plugin_sign=7a04e030e17c997d20207e011dd61abb\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111526354\u0026_lt=\u0026_u=\u0026_xma_=499010 HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 346\r\nOrigin: https://saxox.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":346,"data":"source_url=https%3A%2F%2Fsaxox.cc%2F%23%2Fhome\u0026language=en-US\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026user_id=d332fc07a923cdc285304cb5e04552f3\u0026data=eyJwaG9uZSI6IiIsImVtYWlsIjoiIiwiZGVzY3JpcHRpb24iOiIifQ%3D%3D\u0026is_sandbox=0\u0026before_source_url=\u0026label_names=\u0026custom_fields_ext="}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 21:12:06 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: a3f44e50789a0b69-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://saxox.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 230e21d0-716e-4791-b263-fb6edc0b54f4\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":794,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1fcab00c274e855acb83844b4c617e8d","sha1":"fe14d4772da7655cd2772fd9ec2f1e32791f6c9d","sha256":"e7c6fbd8ff8bad6a438f18e078f0d995b0d529c8d060dc6afc3d1a570a24aeba","sha512":"2454b187e0f922e3fc814f2ad000bebe869820e2e794e7e04e62bc5fe6ed3878cdf2527aa53aa9ef47e9d0db151431532118215edf9021dc11b08a562f7afd2f","ssdeep":"","tlshash":"dcc08c2369e99296178a48480028a18a51e418608d02aa7e48bd152b0a8c3907aa6473","first_seen":"2026-09-22T21:13:15.684061Z","last_seen":"2026-09-22T21:13:15.684061Z","times_seen":1,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":0,"dns":55,"connect":41,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/config.js?1790111520594","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/","date":"2026-09-22T21:12:00.599Z","timestamp":1790111520599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /platform/saxo/config.js?1790111520594 HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:01 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uA6Bd0UCSqXOVhWNow4NrtTXC4VGY7NZ4LbwxKzXJkW9YlB6hZ85TAEh9QLnZPZ7StpcfOpXORg3BjqM43%2FBBI2PhtlXBKrn1zhnyL1eWMwS4FW8s%2FvUb06bVQ%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4c-269\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e2bca8fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":617,"size_decoded":1071,"mime_type":"application/javascript","magic":"ASCII text","md5":"14d593b92101d6d23922da09ed1f021d","sha1":"a758a2e0e3caff73eeb926a698eaee50818c69f5","sha256":"ff7bfe47ac89974ebc77a25cf412e4c0b93aede8f0e50ca9b426a18afaae7773","sha512":"b2da5eb232a4e4f5e7989b4c2076351a0a2eaebbfc0a69c6a11b9812a67dc37902d85e6e2d872a521b657ca57856b686ff770ca1037e89ec0081908d407a9821","ssdeep":"","tlshash":"0df00c41f2b49c281940492648c710acf9610b774a0d3c7df3aa60102f0c89b083a16c","first_seen":"2026-07-10T15:16:49.431278Z","last_seen":"2026-09-22T21:13:48.422916Z","times_seen":33,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/customer.min.js?1790111521282","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/","date":"2026-09-22T21:12:01.285Z","timestamp":1790111521285,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /platform/saxo/customer.min.js?1790111521282 HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/favicon.ico?2.0.1781365838952","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:03.790Z","timestamp":1790111523790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /platform/saxo/favicon.ico?2.0.1781365838952 HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:03 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8WaoOXJj0%2Bf7s%2F%2BEsn71fDLqcrnExEfrablEIqN6dlDzZGW9j6qOSa24U0T37b6x6eJZZJe4wVNyDVcbBZHQKEVWiPJwzO%2Ff98meoL8EhMM0vHPoT2G8HAMKGQ%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4c-3c2e\"\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e3fbdf7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":4097,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"14706820adb4c4843f9242233a8618bc","sha1":"d275e865ed012a66805c08e0eb596aedd24ac30a","sha256":"d69f487ef628fe2f9cde86e4e1b6bacabb2920086a904a0a97b266678ced6014","sha512":"a5211af91386b8a0b66ce22f2eee3ad4d7a42b65768612672d7deb0e6f19b5f858d1203df7fb36697d0e9de6dfa02c5cecace545241000da4ba846ae30252661","ssdeep":"192:B/nVCcXJ7HY8QrXD6jTNclnPb3Kw5M2zPyJaf9k:BfrXJ7HYZqTEnz6crUaf","tlshash":"326264b26a6011e7c9bd4335039acf6922f5ffb175607221d2b179a9cb3e3402cc5e1a","first_seen":"2026-03-09T14:08:14.085533Z","last_seen":"2026-09-22T21:13:15.6855Z","times_seen":24,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.228Z","timestamp":1790111525228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:04:33 GMT\r\nexpires: Tue, 21 Sep 2027 16:04:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:23:36 GMT\r\ncontent-type: font/woff2\r\nage: 104852\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35928,"size_decoded":36741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35928, version 1.0","md5":"a317875aac104234bd7c39df8c501fbb","sha1":"870661970316f61acaab613e3209b9c09e2961f3","sha256":"065e2ab41209dcd60b1c88517c71a741803e3b0647059cb8ee7efff522ed1d40","sha512":"619f405a133ec8227767f08c598399a737d30cea6f76d3c065d2d97ce162bae040ced7fca13ed874d66a1f98472a3a07cf12bb146f432c8d4df24745488e13d0","ssdeep":"768:ybZHErhpxKts8YgN3IJe53ZnJREjqvYSVgXsdp+v0Gd:ybxErktsfgN3fXlicOzd","tlshash":"bef2f11c1a34eb974328047b840084b533ea6da7d63192b121a5fb44cca46fafecfdd6","first_seen":"2025-09-11T17:08:53.61315Z","last_seen":"2026-09-22T22:47:23.657647Z","times_seen":31652,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":17,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/css/ssc-iconfont-CvtfPMD8.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.476Z","timestamp":1790111525476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/css/ssc-iconfont-CvtfPMD8.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Thu, 17 Sep 2026 09:46:54 GMT\r\nx-oss-server-time: 6\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AABB70EE9CC4C3037B1E14E\r\nlast-modified: Thu, 17 Sep 2026 09:41:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2681771549310603774\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: PobtdwDKoyu/AB0zRTW4zA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: Jwzqx0Xe0r9mAbqVjSTYYZxI8rlFIejkdRnbJ0IYCHXO7f-isz3yZQ==\r\nage: 473111\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":149811,"size_decoded":66408,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3e86ed7700caa32bbf001d334535b8cc","sha1":"a3877d3becda80e835f0e5050408a8868a742166","sha256":"fa2e8e908d997d5c56f36a8071254fea91454c787c4c880e30ffc879ac661723","sha512":"4355e6eec3ab00b907c23d724b1befa5b14d66f9f279b87195086be554cfaa014c35983eb5f80137539a2ff203b92f42f53af6656488521d236cf41c9f9f413e","ssdeep":"1536:JunTDOzLoiyVimLONTaeMxv0UqGgzlfzLSqFpFWGFeFjF4FFcpWtE+uV+F8oe5Iz:JFoXVdU6xcnnz9u+V","tlshash":"7be308bcea5115ddfe39ce47271072189c3630effef44d98aaa632495be548cc5a0878","first_seen":"2026-09-18T05:08:27.214854Z","last_seen":"2026-09-22T21:13:48.378373Z","times_seen":14,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/index.a5d387f3.css","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saxox.cc/","date":"2026-09-22T21:11:57.307Z","timestamp":1790111517307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /assets/index.a5d387f3.css HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:11:57 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ue9VsiI8Og2QeqLdszT6UsrqUZ3514wNQrZdVS5pkJlSzQGQqUYpayUWa0Tj9bIVlzUwQV0LAbMaO%2BAZ2GSUtgr02jfbdWEEeCzW1vFQ6aq%2FaDwUSeXO61%2BICw%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4f-8d3e2\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e172e58c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":578530,"size_decoded":115522,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a1e93d2d481fa16444d2d4a4a714331f","sha1":"76066b73c122a6dd89d77ee770ce3f80c1e76de0","sha256":"a5d387f3d317d86ad2a2076e59012fd9df22aac12fa59c9fb8f955a7a0ac4a27","sha512":"1df8e3bc8cfde0cec0929bd32cbfa84357b06f944c7197e70f76eb9d9b49d09aecd5baee47d90a448af84fd3bc57196b6b7dec34d79a96986f459d65ac260c1e","ssdeep":"6144:TSI0MGuhT7M8EcH7pTVkad36fFhsSIcO3jVMa/4uta78+B36JL7u1A+wMif/x0rO:u4PhhPoe","tlshash":"4bc4c655e753513f2e17e67d6bc5e9d8bb28dea1dc11cba1f640a00849c3af102a3d2b","first_seen":"2026-06-09T18:59:45.534553Z","last_seen":"2026-09-22T21:13:15.686482Z","times_seen":15,"resource_available":true,"data":null}},"time_used":1556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":1088,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/index.a5d387f3.css","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:03.098Z","timestamp":1790111523098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /assets/index.a5d387f3.css HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:03 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2BxAcWN%2FccTY%2BgsBq922qkRoSPqX9Lo6VEjSxME8ikSBCnuWUx95pS60e2ba4KlDY3u%2F2zQzghcadcYfBIcRMPGx6Ci43KBMTeCjUcIg8tDnFjLXdGJThJZmKw%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4f-8d3e2\"\r\nage: 5\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e3b5d3fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":578530,"size_decoded":114812,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a1e93d2d481fa16444d2d4a4a714331f","sha1":"76066b73c122a6dd89d77ee770ce3f80c1e76de0","sha256":"a5d387f3d317d86ad2a2076e59012fd9df22aac12fa59c9fb8f955a7a0ac4a27","sha512":"1df8e3bc8cfde0cec0929bd32cbfa84357b06f944c7197e70f76eb9d9b49d09aecd5baee47d90a448af84fd3bc57196b6b7dec34d79a96986f459d65ac260c1e","ssdeep":"6144:TSI0MGuhT7M8EcH7pTVkad36fFhsSIcO3jVMa/4uta78+B36JL7u1A+wMif/x0rO:u4PhhPoe","tlshash":"4bc4c655e753513f2e17e67d6bc5e9d8bb28dea1dc11cba1f640a00849c3af102a3d2b","first_seen":"2026-06-09T18:59:45.534553Z","last_seen":"2026-09-22T21:13:15.686482Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/waihui/XAU.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.257Z","timestamp":1790111525257,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/XAU.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 4tM6n7tEUSkzAXbFQOYEdGECgIpXDuPyp8Qf7FMjXWX7BXKZ8RGk+qizxqxHXw8U8pKENS2raVo=\r\nx-amz-request-id: CADMKGXXZMDFKD00\r\nDate: Tue, 22 Sep 2026 21:12:08 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:36 GMT\r\nETag: \"05921b19d3be159b68972189c3f45773\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 0a31970641800f15755481368d5c2822ae1bf0ca87a5e934b5c914002b003dc7\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 743\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":743,"size_decoded":1270,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit colormap, non-interlaced","md5":"05921b19d3be159b68972189c3f45773","sha1":"d477258c74a875bcdfa51090868782d73fc54db8","sha256":"0a31970641800f15755481368d5c2822ae1bf0ca87a5e934b5c914002b003dc7","sha512":"2157eed35a12d20c87ecfbb4c209c36b160a95d9610897b449c9dea16966a98b194c50070865e66ef54a6e8b61052d312dd56905fb396bd4ba93683341b8eaa3","ssdeep":"","tlshash":"c101e9631ab0ec4bc58ee430c1f75464ae1104a3008aed63d80fcef14d30387f2060c9","first_seen":"2025-06-23T17:22:26.242858Z","last_seen":"2026-09-22T21:13:48.418929Z","times_seen":121,"resource_available":false,"data":null}},"time_used":1995,"timings":{"blocked":-1,"dns":0,"connect":318,"send":0,"wait":320,"receive":0,"ssl":1357},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/chat/widget/code/install.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/","date":"2026-09-22T21:12:01.068Z","timestamp":1790111521068,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /chat/widget/code/install.js HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/waihui/bluzelle.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.286Z","timestamp":1790111525286,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/bluzelle.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: BkkQY83K44ur4vJeX5NxM+9voLKHm8tMGDbcNB16pStqa0llaflBNuKcyfxSP0FYU4EiNFi4cfA=\r\nx-amz-request-id: 85YC5MTGG5ZY1R58\r\nDate: Tue, 22 Sep 2026 21:12:09 GMT\r\nLast-Modified: Thu, 23 Jan 2025 14:17:03 GMT\r\nETag: \"d00efbbdfd298720e829ae2434e8300f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: f42a835f279c3889d4384579c4c6a3688442b7f1c8df12fd3fa4b3741ce140a7\r\nx-amz-meta-s3b-last-modified: 20250123T130954Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 25833\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25833,"size_decoded":26362,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d00efbbdfd298720e829ae2434e8300f","sha1":"5ce11234597ef8050d23bc55f1bf48d4a1152451","sha256":"f42a835f279c3889d4384579c4c6a3688442b7f1c8df12fd3fa4b3741ce140a7","sha512":"6d2425cd1c13c3b83701c51c2afee6c08449c491422f3613f956025e1623993c78d242d4dbeaca645f298d7fee413c9268374dfcfe0766890027eb5c796ef3b7","ssdeep":"768:3EMrF5XvEfBimA9K2mX7VDsJHCf96WOdkKCbjGO0hb:3VR5XEBimAQvGicWqCbp0","tlshash":"72c2e0aed8d8c48878afaa3179d5c071d7b5e9bee9717c2271ce843319507071c0e9b8","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-22T21:13:48.371187Z","times_seen":127,"resource_available":false,"data":null}},"time_used":3520,"timings":{"blocked":2576,"dns":0,"connect":0,"send":0,"wait":342,"receive":602,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=7d42b19cbb40ea29cfd5afa531f3125e\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111532299\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=67b6cb806be00fae3c58b98487db4be8\u0026_xma_=499010","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:12.308Z","timestamp":1790111532308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 18:24:56 GMT","end":"Tue, 08 Dec 2026 19:24:53 GMT"},"fingerprint":{"sha1":"BA:65:E4:51:B7:18:15:22:D7:EA:A4:59:0A:09:5F:C8:F2:8C:D9:5F","sha256":"35:D1:EB:26:89:81:E2:50:1C:FD:22:37:F8:63:7A:3D:0A:A7:62:9D:1B:DA:A1:FD:F2:25:62:B0:7A:67:A3:C2"}}},"request":{"raw":"POST /client/log/log?plugin_sign=7d42b19cbb40ea29cfd5afa531f3125e\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111532299\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=67b6cb806be00fae3c58b98487db4be8\u0026_xma_=499010 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 768\r\nOrigin: https://saxox.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nCookie: ss_uid=67b6cb806be00fae3c58b98487db4be8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":768,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHGl2fa15uvyh8htTV8rCyiyGtEPVzpP9uvyh8ht3zZrnkhMhyjMnlmrAsqs5R8s5uvI3I%2BlQD5rAt%2BIev5l2XQIAOSshypyQrpPStb1nohMhyhBdHQP3zSNSHVrhyiyhypyGHWP9abtTV8rCyiIh8htQXqf9VWPhyiyGsjBA6%2Fl56%2FluFjI5RmIAlklef8l5Okyh8hP3u%2FrSX%2Br9DhMhHVPhaXDqypyGXqPdyiyQ%2B4tTY5MhFWf9ukPSR%2Fs9lWyqzKP9aVyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2FldY4snHHrdz4snHbl2fmleOjl2DqlAySIuzqInVQtSEjyh8htNIVfVzErdyiyQIvs2VQlQXvsnDqM3O5leO8rnsSMefSsAX%2BM2DjrAlmyh8htNIVNScEPnDhMAskM26pyQjWrazvsNc%2ByAEgyQHqPSt5rNHbfSX8f3zqtdyi0qHAP9zZ1nX5yAKjBdHpP9I%2BPuI4PSH%2Br9DhMAuzBdHAtNHqrnm4D9Iq1NY4yAKhyh8hr9X%2FrNH%2Bt3VWPhyiyGsqyG4pyGIv1azqrnmvrNHbPnzvrCyiyGIKsncWtqHz\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 21:12:12 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3f44e74e93cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":604,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-09-22T21:14:40.573958Z","times_seen":2897,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/logo_144.png?2.0.1781365838952","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/","date":"2026-09-22T21:12:00.168Z","timestamp":1790111520168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /platform/saxo/logo_144.png?2.0.1781365838952 HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:00 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ia5zq1isETcNkbhqv8QqOJTqxFtpx%2B6Gm%2FIaEukjgh3LblrQAiqhcCCpGwpUlfJvAEBZpeAJcniHrvZXkePYhffYhDVIqYGCOmU3BDbOIdGeJQ5DlREu6OEtKw%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e290a09c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":736,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-09-22T21:13:48.401192Z","times_seen":47519,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/index.58c26beb.css","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saxox.cc/","date":"2026-09-22T21:12:00.747Z","timestamp":1790111520747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /assets/index.58c26beb.css HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:01 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vz%2B6vZymPeVGn66Aqz6K24FPBwwdBrpMPOQFww5tWjigG94F%2B%2BayWgejxnDpWBryr1bWIQhBzqZ%2F4M%2F2ZbxYtJip3OgIaeS4o0ZoRSvh4%2Fuk9Xq%2BU%2F92%2BxPA%2FA%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4f-3a58\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e2caac0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14936,"size_decoded":3425,"mime_type":"text/css","magic":"ASCII text, with very long lines (14935)","md5":"faac1c5b9c8c7059628ca954bb5f5dce","sha1":"f9729638e6a4358c2d44f72ac75e5abe145109c7","sha256":"58c26beb2ae7204c94d49b54c88712b03c2d9b1a83c0a361f07925d419abd19f","sha512":"32c4525aa984ad71eb0647eaa20e5b59d27a26508634b7da1664c3b380ab32a8ffba28b1b651309154fb135bb7cd1bdf0852dec9a5d3bedcdaf7ce152d5bfdee","ssdeep":"96:GEE2Z4ATSDr1VqXMPGdLrPnwrYDg5O3PouNTZQ3zW8voSQStltd1kkDQ/UsDU+Vp:hE2OrGXMu2Y1ouXQ3SWoSQStllbaUy2w","tlshash":"59628458b59c2136b837e4196d98878e7042fb97880763dddc8aa96ecdc39f32738341","first_seen":"2026-03-09T14:08:14.111026Z","last_seen":"2026-09-22T21:13:48.379364Z","times_seen":49,"resource_available":true,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.salesmartly.com/plugin/info?language=en-US\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111525732\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"widget.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.742Z","timestamp":1790111525742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 21:51:06 GMT","end":"Sat, 21 Nov 2026 22:51:04 GMT"},"fingerprint":{"sha1":"DB:AB:9E:78:CB:E8:C8:0A:A9:8C:FE:88:39:5E:BE:DB:7F:20:7E:15","sha256":"0D:B8:1F:90:BF:A4:B5:3E:DB:C8:A7:15:63:42:C3:A0:A8:91:D5:19:74:6C:7C:C6:4B:BD:4C:91:84:69:37:3D"}}},"request":{"raw":"GET /plugin/info?language=en-US\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111525732\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: widget.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: 32f4add242a525d6d4855057b8f4b13c\r\nOrigin: https://saxox.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 21:12:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nserver: cloudflare\r\nx-request-id: 2fffe992-ee2b-429a-9174-b57e5d7e1389\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: a3f44e4d28fa56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4611,"size_decoded":2521,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"278a83db7096970d1a6702c6d87a1586","sha1":"724b35939aa2915e9360388e68927a0fc5f34467","sha256":"cf2c998c63d61b1c147a4ed7acf033bc39a1518a1fc433284fdfa5a9849441fe","sha512":"1332a798c637d2e8ffa94c4e4d8e43d702da1b600afea14fc4679b2fe8408f8502d517499c6172a46b53afc3d1290a102050ea95a3b8b49dae7a7ad5a7bdaf5d","ssdeep":"96:CeA94pPLb2Vz9ZLs+K4+MHL/H/GkdLPZXZdSDHhVeA3:hEmqVz9Jspkr/H/B+Hh/","tlshash":"11915331a05bd923a19308a861ec9d115eaa4774c1cc8f54edacde2d89fc8e6a71750f","first_seen":"2026-09-15T14:44:52.084768Z","last_seen":"2026-09-22T21:13:15.688386Z","times_seen":3,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.saxox.cc/api/common/getAllSetting","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.431Z","timestamp":1790111524431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: \r\nSatoken: \r\nlanguage: ja\r\nlang: ja\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:04 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=byve0FB4tJiBRitKtCwYuXV3UCtXc9kiFKfAEUA2wwk4Y8B0gGdlm6IGKgA7Y3%2FjPxpVB8ciCJgLcgkJB2kUOZ0QT2%2BoqyEVqKEnR3ulcbIvWv6sug0AUmpf%2FcWL3ho%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e450eb85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13177,"size_decoded":4402,"mime_type":"application/json","magic":"JSON text data","md5":"24401371592fbfb08c491c47389c15c4","sha1":"6e96141100f99dc2f94d63dc8bdb142b2223b4bc","sha256":"067e52d1dc94c142af1a3318bad09f5c32b29a209826a811045ad72df0dc450f","sha512":"749db4eb45608ee7601e0f271e4dda64a77ea752d14543242f25b6fc46014e8f96d49a9dd871eab53c72b304371bed7b05dc8cf3b74ced4f9192db4b0fa6afc3","ssdeep":"192:cAnwCafO23BV9lNVehP+qEG+cEWn2hnGy5zDNZFXvTJ/B59I662sReD1iMN75Eao:zZI3EP2LD4M5T1tQDp","tlshash":"6e42135870ecccbdd9c729c664e736c73bac35b3e6a89c1ad596af1c4ad6470480e10b","first_seen":"2026-06-09T18:59:45.520711Z","last_seen":"2026-09-22T21:13:15.688842Z","times_seen":10,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/waihui/solana.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.280Z","timestamp":1790111525280,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/solana.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: tFirebsWMXExuHUFEJXPtWhI79xOehAf8Db0BYdFtHXQEqu+YExqR+ho6W17QJhBrJwHK7IuGiw=\r\nx-amz-request-id: CADM2C9DAT57C576\r\nDate: Tue, 22 Sep 2026 21:12:08 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:36 GMT\r\nETag: \"670c723abc22056bc5368ca2a97dd6a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 25649\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":25649,"size_decoded":26178,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-09-22T21:17:26.913666Z","times_seen":6756,"resource_available":false,"data":null}},"time_used":2868,"timings":{"blocked":1994,"dns":0,"connect":0,"send":0,"wait":304,"receive":570,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=19c9f62c80c1d4ca2e3f7a49315f617b\u0026chat_user_id=cda9f2edae28a3010ef7877b5a951f39\u0026direction_type=1\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111527169\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:07.179Z","timestamp":1790111527179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"GET /chat/chat-msg/unread-msg-list-v2?login_token=19c9f62c80c1d4ca2e3f7a49315f617b\u0026chat_user_id=cda9f2edae28a3010ef7877b5a951f39\u0026direction_type=1\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111527169\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: aa074006d53d969d6218a722a0769da9\r\nOrigin: https://saxox.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 21:12:07 GMT\r\ncontent-type: application/json\r\ncf-ray: a3f44e54f9ce0883-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://saxox.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 00e06775-ee74-4df5-b882-1ad656db018a\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":775,"mime_type":"application/json","magic":"JSON text data","md5":"48016efe262190df0ad5b1d7340a60c4","sha1":"1cd9c973630bf59e2c479cada9105bbfad39dec3","sha256":"6e59b9f826a2a9b503fb05fd33448a0583d30552aed790dfea6cb19e74bb409c","sha512":"274e846e9ad5c7fdbff3fb665809347f229260b2b2eb491f386a5d1084a7fd7526a4e0eb331c71c4eeb14a98143925c29e2702869c11883176eb14ffbba9993b","ssdeep":"","tlshash":"4ca002562c2c1e4b0f0fe489780d1b17d6e911445a252712cdcc915c870da5eb5c7521","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-09-22T21:14:40.551733Z","times_seen":2053,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.380Z","timestamp":1790111525380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Mon, 21 Sep 2026 18:07:30 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AB172628F02F93730917838\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Thu, 17 Sep 2026 09:41:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13603352665295456706\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: WRZTpu000J7VUTWPmnt5tQ==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: Pqvl3RhWMjtq5aKepbYNihrVUzKSqqeRPamCs9l0TMernV2hMZz3kw==\r\nage: 97475\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":11360,"size_decoded":5221,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11359)","md5":"591653a6ed34d09ed551358f9a7b79b5","sha1":"08279f224ead65fcbbce218d353cdc1e923f8430","sha256":"776c9a312c4f27042989945ae1dd882c8b798c3c054a1428c8769eb6a724a20e","sha512":"678c7ca7263b657172fdbd1d79b55726964ac6a1802d9a3cc06ad0436b3e4979b4dd6a884551fb93fe4260e77667b849b14abf60610a097faf3d609ba5dddf53","ssdeep":"192:QC0YZgFFR1F0QdIGY4p3xmWdHFQg2uzYV9us6yYH7ltCAwxeon2OypVz+9Hw6RwU:D0YZgFFzFSGqW12g2UyQmGu2jSQjVKbJ","tlshash":"bf322a193832697555b80c94607a9302b5ed26633005d4f0f2fcce7eb655e8782b9ebe","first_seen":"2026-09-18T05:08:27.076662Z","last_seen":"2026-09-22T21:13:48.423599Z","times_seen":14,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/chat/widget/code/install.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.886Z","timestamp":1790111524886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /chat/widget/code/install.js HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:04 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FQ1yhzERApz1E%2FxDin3F88q2a9BquIy%2BWflM8i5sgH5Lsu4dAztNmkoQD4PUifAN%2F%2B%2FECA8BHbn5369n6acp%2FlH54NMAlum8%2B7veF0cgiuzFW%2FWnoHUJyObJOQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e468ff7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":757,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-09-22T21:13:48.401192Z","times_seen":47519,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BO1BJI-2.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.533Z","timestamp":1790111525533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-BO1BJI-2.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Mon, 21 Sep 2026 18:07:31 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AB172630A930631340DE5CA\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Thu, 17 Sep 2026 09:41:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3956808462139976565\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: ofDTl1yVX934xLSevlaEBw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 52jKw578WYT5RvsT9GHqbxbAE_4s9qDfNwWfpoB8xYJtnbyKjApGBA==\r\nage: 97473\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":79629,"size_decoded":32459,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a1f0d3975c955fddf8c4b49ebe568407","sha1":"7b559dc893e3a59fe77d9553a8af7d6931f2e068","sha256":"85a50ac089309670d7b46e44d1ef17ab132599486ba995f6f12d07f72f4dd191","sha512":"e28c1ce7e3b1b762886f98bf8611a0b33a157c355a760d83602a75df917689c2013d51d4e52faa14445af13ec9bb6eed797f96db1ebd6a8bc8955c90289f1bdc","ssdeep":"1536:ffeY1Ph7WaDN38VCuXI3BDDAeP0/AKANwnntDi:fWYmahMqBDDAx/LANwntDi","tlshash":"507319e831a2b47113ea08e1507b0406f37d6845344ac4e9f5adaedf3e7641641abfbe","first_seen":"2026-05-14T12:23:11.157843Z","last_seen":"2026-09-22T21:13:48.417471Z","times_seen":457,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/waihui/da9bc5822529a2c225e057c0d8d50f36.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.279Z","timestamp":1790111525279,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/da9bc5822529a2c225e057c0d8d50f36.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: mPqhRuhWu2Jx+a3ga6Br0LY8FeLNXfjtfdzkFeibnW5J2J1U0yhBwuDt3GMuc35y4LINBC2fv50=\r\nx-amz-request-id: CADPYF48DHRZZQ87\r\nDate: Tue, 22 Sep 2026 21:12:08 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:35 GMT\r\nETag: \"da9bc5822529a2c225e057c0d8d50f36\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: f51f30797900cc0ba2647fad1078d29725f4410442a472df1812ae70d89e22d6\r\nx-amz-meta-s3b-last-modified: 20250326T121512Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 12446\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12446,"size_decoded":12975,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"da9bc5822529a2c225e057c0d8d50f36","sha1":"82b82dcdfcdb456c30cd1901d162f6eda4755768","sha256":"f51f30797900cc0ba2647fad1078d29725f4410442a472df1812ae70d89e22d6","sha512":"c9c6ab97fd64a5d5901b3b97e3e2ff445588c37246abd20315c9f23496ba7040f6a14d0d95b5b0012cf7a30ac026ae818b16befef162330410d38810248b2ff3","ssdeep":"192:lF5DMISPEWXUxj4OcJTctXlli9mso8hM4CaD0ze/uCPuuzxd3iDPr:tMVEBxkO0TctXS9K4J/uCPB1ReD","tlshash":"93428df604472703f9bc1c97a3de061d18750f359251ee25d0ec1c5972a8aaf1bf606e","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-22T21:13:48.391161Z","times_seen":104,"resource_available":false,"data":null}},"time_used":2578,"timings":{"blocked":1933,"dns":0,"connect":0,"send":0,"wait":331,"receive":314,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.saxox.cc/api/notice/list?key=ROLL_NOTICE","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.310Z","timestamp":1790111525310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 11\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11,"data":"ROLL_NOTICE"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eRuztfET09%2BRyNqw8WijQDhVKPp1NVFUTkv4YvasTrcO%2BGA58phlm3CICDB9FWjsyB3npqGFDpSAEmMmmNCwwSc%2F9LfHYfm0D%2F%2FthfKQ%2FIJa0Nl%2BuY7l9att3VMMacw%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e4bcff75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":620,"size_decoded":1263,"mime_type":"application/json","magic":"JSON text data","md5":"9465cda44517b572205f15f70f860345","sha1":"3d624e0ba72610c9845011ca2cd1a38f214f4972","sha256":"fd9884936544a18ef42e34a392bd6f2eed85a673ab7c5055959e8a3c87268f31","sha512":"a9fdaf5beccaf932f74679d3aec3078427b6173a85e18a2ec22522fea30d96ccb18a9faf1918c396fc34b3d71c69cfb6db081a3e4df920be8824a8c6501e59b7","ssdeep":"","tlshash":"e3f0ac4d027c8e758c0391c714ccbdcda12e1e87e5a0cc7085aecf1941f117ac709a29","first_seen":"2025-09-08T01:16:02.854893Z","last_seen":"2026-09-22T21:13:48.387564Z","times_seen":72,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/centrifugo-token?login_token=19c9f62c80c1d4ca2e3f7a49315f617b\u0026chat_user_id=cda9f2edae28a3010ef7877b5a951f39\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111526823\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:06.831Z","timestamp":1790111526831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"GET /chat/chat-msg/centrifugo-token?login_token=19c9f62c80c1d4ca2e3f7a49315f617b\u0026chat_user_id=cda9f2edae28a3010ef7877b5a951f39\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111526823\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: b407e82f03124a95581e064a6a2d586a\r\nOrigin: https://saxox.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 21:12:07 GMT\r\ncontent-type: application/json\r\ncf-ray: a3f44e532b780883-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://saxox.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 05bbdac9-1578-47f8-abfc-bddf1e856d8f\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":478,"size_decoded":1046,"mime_type":"application/json","magic":"JSON text data","md5":"e22764b5458476868ff79bdb78066b64","sha1":"0111d4c263a96586cb58f7214b4ad8b577c62354","sha256":"1119f21be779cc471a29d53243c63e4f85a023624e5cef30c4f7a54d1e5c5ded","sha512":"fd8f95bd6cbb4ed5f8a019d88a2d258a14e0366a49f8f8ca19168087fc1131c0da984e1ccbf8be594058e70e9259aee3df8c39c043d8a9283197abe23afea745","ssdeep":"","tlshash":"ddf09ec58215969252e17d03096c4c0c42cc1bf15ac029badfcd75554e703acbdc7049","first_seen":"2026-09-22T21:13:15.692355Z","last_seen":"2026-09-22T21:13:15.692355Z","times_seen":1,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.saxox.cc/api/common/getCoinList","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.427Z","timestamp":1790111524427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: \r\nSatoken: \r\nlanguage: ja\r\nlang: ja\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:04 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0ZlhMTCsuQZsGNRWsB0cZM5vsojyf2dvkJaNNdYqwVyL3kaaXSUu2eM2Fcsu0sG%2FYCvIkrPpW4r6Wwy09Fy2ypgxrpf2rUwCNTal7hErzqwkTROepoczvb6zWKiOO4%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e44feb55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29539,"size_decoded":4276,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (29523), with no line terminators","md5":"4387709342aa210e892933f19b6a330e","sha1":"2876252899930dca5ee40c3f07410d09c9999547","sha256":"a81653ce2858fe62a31ee06824669da3eebef6a76e497fac6070a339befccce9","sha512":"7d5c42a55053377d7c71e8e0c9ee2a9808b094dd41ded7d6b67b299c17368759c669ed2d357391142be315d7773f92263ce4690e2814941ad8e1ca639bd564d0","ssdeep":"192:5XSWJXn23Xa2X96sX9nXvJXI33XrMXN7XWMVXE2BXoDXFwXhkQX+oXRBX1zXz0gr:nl9xRzUiFSzn","tlshash":"b3d202995538a4bdca79e0d11ebf7d5611ac316fecc54e16c2df8d8c8ee4ab0250af02","first_seen":"2026-09-22T21:13:15.693403Z","last_seen":"2026-09-22T21:13:15.693403Z","times_seen":1,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/index.a66d74f9.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.555Z","timestamp":1790111524555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /assets/index.a66d74f9.js HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CTfftcBy4SqCk4VsUaoCuHJJ8IOZYJaVzAOrTZb9GFO1TPSbFVHa1%2FLlXhj5W1gLaxRNbTWZQUVXQcmeIs54HtI2trRVuczk431EiR7TOP8kMdne87NAeYtWhw%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4f-6b97\"\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e447f43c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27543,"size_decoded":7524,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27542)","md5":"11565ad0e359f4ad8b90946f5a0344a9","sha1":"0781f4a0f8a668a6e92e737350b1bf5f8fd0742c","sha256":"48d9effe6a5760439d34f58227c978ca95f47197a4e24c841d2af158d90dd8b9","sha512":"2ad6b9b095c212423890cc8c423e05bed903528c493780273835eb4334d264c3aa9eb13ce2ad5c5d71f1a582bdd4e041d2d517ed3810f2e4d8bdd111c89139a8","ssdeep":"384:9xO60Nk3eHzP/vU0ijZwfyx25DMvMk/gN42h7Z+PERpKZ:9xO60q3kLnvijZwax2IMLN42T+P80Z","tlshash":"9bc21fb8f52a8978f1f78951105c3505224cffd385508693b6fc2a599b83dbc3b8e72a","first_seen":"2026-07-17T15:46:52.069306Z","last_seen":"2026-09-22T21:13:15.694359Z","times_seen":10,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/resource/images/common/home/Selection-c.png","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.302Z","timestamp":1790111525302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /resource/images/common/home/Selection-c.png HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=5,i\r\netag: \"6a2d7c4c-13e0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d106ucX4PDzzZHfhsdFx1njSxSrcLPNLvCj%2FNzvQnwv%2B%2FvgrIa%2BUwrFydL4cPZDdLmQVuDt00YEWW%2FhRFrd67fthuRQeHr16W0PA7%2F5VyK6oiIPjFXWKzUFvjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e4928abc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5088,"size_decoded":5776,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"c1e0cfa54461cfe2003359fe589984dd","sha1":"fd82904639342a643be65d67f8a24c5d16e445b8","sha256":"69e6f084038fd9c2196d3349b6be282bb366b9b47c5dfdb07b917a4956eb79fb","sha512":"dc0feff751431464fb48d538ac9dca32103da30c468e078100a2625ea616500cb026aa75a54c1450ce37539a93dad647a82a91e7bacf2f7dad9b9f4e639e73fa","ssdeep":"96:Y3l7a2ASmDfKAw8m2QCvNLPHQt2sotAi4EbsxVcgqiT56IaZ/IvEKdRh7zUt2:YFyPmO1Q2Leilb6F56Z3KRI2","tlshash":"15a18f7b6ce42c16cf86e6d90f86130c2b94c06f01586e13541eaad90f708f8329e709","first_seen":"2024-08-19T17:34:46.646268Z","last_seen":"2026-09-22T21:13:48.394654Z","times_seen":172,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/stock/GOOGL.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.275Z","timestamp":1790111525275,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /stock/GOOGL.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 4wWK3xMtj5E7jIlAXXqh6yLKa2pCeP4sRnQg2sOH/McWp0aLU06mXPJ0XKSJfaXkIbpO/ohE0A8=\r\nx-amz-request-id: 85YF3JVNY2DYVBJD\r\nDate: Tue, 22 Sep 2026 21:12:09 GMT\r\nLast-Modified: Thu, 02 Oct 2025 12:01:32 GMT\r\nETag: \"e8c5b9567c1f03356216912456238b00\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-checksum-sha256: 1479e1e7f847bb2c5befada7eef2e09d7815de10dbe7abbd7e388d0e3156cb80\r\nx-amz-meta-s3b-last-modified: 20251001T074741Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 19700\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19700,"size_decoded":20238,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"e8c5b9567c1f03356216912456238b00","sha1":"a18d4b2ce1d9bf316773d72747544475c946d211","sha256":"1479e1e7f847bb2c5befada7eef2e09d7815de10dbe7abbd7e388d0e3156cb80","sha512":"becf63e2fd9b35626768df8f1d58d9e690dcdfc1935a279bff255e79739f26cd9d32adbbdd25c2de0cd600b16e6288cadd684f212b57657aedee4e063554c5ce","ssdeep":"384:6TPxXU+4UGIC8q4h3pgzrHF0/ltgKefB75W:6PxX4UGIZq4h36n6t725W","tlshash":"c8927b4f7079ca2379c7d08305bea8b5e065f9f46365a2238639f81126da7809fc4d7b","first_seen":"2026-03-05T18:43:11.183916Z","last_seen":"2026-09-22T21:13:48.395207Z","times_seen":51,"resource_available":false,"data":null}},"time_used":3461,"timings":{"blocked":2870,"dns":0,"connect":0,"send":0,"wait":305,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.565Z","timestamp":1790111525565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Mon, 21 Sep 2026 18:07:32 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AB172648F02F93730958C38\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Thu, 17 Sep 2026 09:41:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16134971315845804156\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: VbsXXiLX6p8NP0gV+iTFeA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: sG3RCnHiaYcWr1fULRmFwN5oJyjFS7szDsMs3d0x_3y-tZfqycdL4g==\r\nage: 97473\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":109345,"size_decoded":39307,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bb175e22d7ea9f0d3f4815fa24c578","sha1":"d76864c11a42bff61779b52396d33ea99c46eb64","sha256":"8529f3d80f868c6f4121eab6a7b9f7ac6d19f89559502602cdaf2f91ad5ba614","sha512":"8fc39c6637e78fd48599026bec71361668175456a2b3d76a8eadf37f107bdbbc486feeead4ad200e9c628179b461c7eefb804222cb9a7619901e733b90d82de2","ssdeep":"1536:bzlbWdNzaNG6ZJgJdvJQ9CtXDTHEN4QC8AOgoAhWo1uVLxYnTUnfd5+k3:bzlxN6/tv84QC8AAAhr15TUnfd5+u","tlshash":"06b31cc47293b06643e324f4406f144af17dbc24548c9498f2a5e5eb7cb899e92bbf78","first_seen":"2026-05-14T12:23:11.144675Z","last_seen":"2026-09-22T21:13:48.42755Z","times_seen":456,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/centrifugo-token?login_token=19c9f62c80c1d4ca2e3f7a49315f617b\u0026chat_user_id=cda9f2edae28a3010ef7877b5a951f39\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111526823\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:06.834Z","timestamp":1790111526834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"OPTIONS /chat/chat-msg/centrifugo-token?login_token=19c9f62c80c1d4ca2e3f7a49315f617b\u0026chat_user_id=cda9f2edae28a3010ef7877b5a951f39\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111526823\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://saxox.cc/\r\nOrigin: https://saxox.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 21:12:06 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a3f44e52fad50883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":557,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/stock/NVDA.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.272Z","timestamp":1790111525272,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /stock/NVDA.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: TYeBWorzAqcSq2Avp9f/ZAUefIsJ97TDyP8uJ28Cjn7L52eMp227CRAH8V1LjQcGxkBZHrz8NRs=\r\nx-amz-request-id: 85Y04ZT3T60QAG1N\r\nDate: Tue, 22 Sep 2026 21:12:09 GMT\r\nLast-Modified: Thu, 02 Oct 2025 12:03:19 GMT\r\nETag: \"b84d773a0f9198f9c5ea73530e979246\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-checksum-sha256: 20a230fc3c09e63dcae0bb61f9e5866e8bf16574d7e221c4fbe1129e52aebb94\r\nx-amz-meta-s3b-last-modified: 20251001T133719Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 79006\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":79006,"size_decoded":79544,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"b84d773a0f9198f9c5ea73530e979246","sha1":"4bee024c7f64c1de36a131da7c6f7b8170d7c9c1","sha256":"20a230fc3c09e63dcae0bb61f9e5866e8bf16574d7e221c4fbe1129e52aebb94","sha512":"5fbef6d9218344573a6fdad3afa21aceb4be3a920edc26cf93fbc5cf838a02ff27e07463f5728ac5bfd6c8fd6b78545b26ba94549ea0c5ad68ecd11a951b1334","ssdeep":"1536:ktvW/tKrrNTWqteT9LOAF8Nds2wonJutp0IJ8OcfZvXGNRJuyaox8BZ3C:ktvW/tK1TWqtML8VoH/Je94RMnC","tlshash":"867302dbee8bc177c304a7f2789291b7a326a5eb358df166c284622174c83775d3019e","first_seen":"2025-11-07T06:41:56.41559Z","last_seen":"2026-09-22T21:13:48.382563Z","times_seen":64,"resource_available":false,"data":null}},"time_used":4245,"timings":{"blocked":2753,"dns":0,"connect":0,"send":0,"wait":319,"receive":1173,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/CommonMethod.b79fc123.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.556Z","timestamp":1790111524556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /assets/CommonMethod.b79fc123.js HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eP%2FPcCCk%2BCPHFr6w%2Bnf1Eb5lOM4vep0Fgy8V1oyHvvb9WGeDYOyMrfytZQS%2BPUbJyZyGERiOuHtn0mCyoiYoavlQFJs7HBEA0kmYzm7Cw%2FaS8Ada9SgxYk6URw%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4f-367\"\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e447f44c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":1192,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (870)","md5":"3117072cb793580713c1eb83c79477a7","sha1":"24719bbae2582ee1451a0675faeecc2072f0e479","sha256":"21be9c26a43cf8fb09259a7f9767394de4cc7116931ec0519d754e22373f4a6f","sha512":"4776242496161290e853e7f05ee650dcbdffbdfa85b3bce65f6eab7cabd12ed74f4acedb5cc724a9c31ae6fd3df11e2e10e41302ba4678f2a80c3de5725f8162","ssdeep":"","tlshash":"111100d0e48dfb291328db69a1208033f25d48b51e288764d0f95d717b29449b79ea24","first_seen":"2026-07-17T15:46:52.079696Z","last_seen":"2026-09-22T21:13:15.66666Z","times_seen":10,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/recent-msg-list-v2?login_token=19c9f62c80c1d4ca2e3f7a49315f617b\u0026limit=20\u0026sender_type=0\u0026chat_user_id=cda9f2edae28a3010ef7877b5a951f39\u0026direction_type=0\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111526821\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:06.830Z","timestamp":1790111526830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"OPTIONS /chat/chat-msg/recent-msg-list-v2?login_token=19c9f62c80c1d4ca2e3f7a49315f617b\u0026limit=20\u0026sender_type=0\u0026chat_user_id=cda9f2edae28a3010ef7877b5a951f39\u0026direction_type=0\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111526821\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://saxox.cc/\r\nOrigin: https://saxox.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 21:12:06 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a3f44e52fad00883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":557,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":26,"connect":11,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.538Z","timestamp":1790111525538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Mon, 21 Sep 2026 18:07:31 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AB172632FE6AF343703E751\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: x-oss-request-id, ETag\r\naccess-control-max-age: 600\r\nlast-modified: Thu, 17 Sep 2026 09:41:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17389672731008990191\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: QUYS0PYmdi3UBkqdEfghww==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: t2HnCzK0wVkWfenGCq25Sp-m51JLe8WQvvf_lW9tWGMDIPKMgQnEYw==\r\nage: 97473\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19114,"size_decoded":7683,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19113)","md5":"414612d0f626762dd4064a9d11f821c3","sha1":"1dfc6b06d8e4ca15ca986617d42e38eae947e94d","sha256":"39d68e743efe9cd9348cdd0e395ba726e43fba69c9288ca14554821d55969fe2","sha512":"87034b7526f8ef8dca2da1c61920e35f138214e42516e48057c3b39ee646a012685a924eb7155a60e8baef89aafc2ae9569f0d6e3635a3d812dfbeb95584d8fa","ssdeep":"384:5rlwqjdJMrxZ37t3XcCCcEvX5GG62NzbtJ5bOSKOjPComEWaj:tlwB329IBAbUbOjPComEWaj","tlshash":"d182b3c974eab58103927078153fa04bf1b37836556dc629a269d1defcbc08ee227d38","first_seen":"2026-05-14T12:23:11.031581Z","last_seen":"2026-09-22T21:13:48.393515Z","times_seen":456,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T21:11:56.286Z","timestamp":1790111516286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:11:56 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hH8n7WNtlLa2Nl26fHnEX4PbBGuvvDmcFyW3MsyrWEWW%2BbulqNHgZFWeFq0k3gc5keveZ7AU1nEzT0O%2BgnxWS3WE0iy%2Bl0%2Fljqu%2FRYuTZ3L7t5JoZS6OU5OXoQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e111ceac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3211,"size_decoded":1890,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2085), with CRLF, LF line terminators","md5":"9014b80d13825ba82986c9fad6effb4f","sha1":"5f437ea4f1472b814b67174109d74faedb0d4ff6","sha256":"5c30860ba77a11ce1be5a2dedd0ba14c7f9ee2928b672a0d75f757049a2312c1","sha512":"80358674c3b9ce9ede1b85d155190f7c2de6cb91b295762892179176da819ec664b91e4ae464ecaf638c7531ab568f9effc67d69ee916da23f9071c8da624408","ssdeep":"","tlshash":"606160b618b0d81e237001bedee77018ce25129a86065e6575cd54ee8ff5fe480cbb65","first_seen":"2026-07-17T15:46:52.025962Z","last_seen":"2026-09-22T21:13:15.697315Z","times_seen":13,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":26,"connect":19,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.saxox.cc/api/common/getMt5Amount?coin=xag","fqdn":"api.saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.075Z","timestamp":1790111525075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: api.saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://saxox.cc/\r\nOrigin: https://saxox.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0SXN8Fb7b73yFxH1ys01PQSdeWf%2Bj1DvXCIEknPDCMil1EY1JRxe%2BYoBKUiK%2FPsl%2B2veyWF3UVE58lCs5aJGjfT%2B1rocSqFbYF4Jdm10SU3Y9irYPK0tOUcTz4Ru%2Fao%3D\"}]}\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e47bf425ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":711,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"api.saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/resource/images/common/home/investimg.png?1790111525143","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.306Z","timestamp":1790111525306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /resource/images/common/home/investimg.png?1790111525143 HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=5,i\r\netag: \"6a2d7c4c-12ec5\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jY1oGJiairM3H%2BogWMZnziJVKdFcpjG4tYzCgULDsx3y8f62RRV1z1R61UKhag35PrE3YZT9VLPTlW2BXr3Fz%2FM3cDcWg4rLRskJ8k%2BJriVDD9zJgB2m7pJquA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e4928aec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 77509\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77509,"size_decoded":78193,"mime_type":"image/png","magic":"PNG image data, 960 x 960, 8-bit colormap, non-interlaced","md5":"9267ad6af6eaacc24390a8f33870ef76","sha1":"6541d731da0afcd1af6587e1b4c13bc5f1fe4d52","sha256":"aa6a9c639280f31ff25cd23af4f8cb4f12b731b972a4468ae251daad06117b11","sha512":"de85a8516252d1fc79ef5fd40ddc19ebd4e3f7ca0e933bb0ae91715748bde79cca7b3e650851d421dfa44e69236722340f17deacae4b2e83150aebfea98b9eaa","ssdeep":"1536:i4LGU8vqIyjyXqRwksQsohMUqQHwqO3X6GU0NSKqYN/o/rTTkPjtbG7jqs:i4LGWIyjyaGksQvLqQHwx97SKqC/o/rh","tlshash":"df73013bb7bc0646900205a14fb212e92b660cbbe647fc86fe711ea19936d2b5115acc","first_seen":"2024-08-19T17:34:46.66014Z","last_seen":"2026-09-22T21:13:48.389594Z","times_seen":181,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":424,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.340Z","timestamp":1790111525340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Thu, 17 Sep 2026 09:46:53 GMT\r\nx-oss-server-time: 6\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AABB70DA846BB3033B25F0E\r\nlast-modified: Thu, 17 Sep 2026 09:41:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4629340629526719112\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: Xa21QxaOrUkQS/29mmeS7A==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: uVdskGnZBNO66exMJkRtzn_KdF7QyKtV89GSaGJTdK_LsZxwQy02vw==\r\nage: 473112\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1673,"size_decoded":1466,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1672)","md5":"5dadb543168ead49104bfdbd9a6792ec","sha1":"e107d310f08d785f513df33c57ffd4d5ee9eb38b","sha256":"180bebe289c59cf98a27430d0753a1a50170d40e40524b05c8373160a8696d59","sha512":"ea2db13466c34612bc7f01196882e037fffba5b487a7e1c492eddf2777c6462436a709998f3791b24d952229ea01ef373d1cb9be44a94affab73e92f59ed170c","ssdeep":"","tlshash":"ea311499b9b1b431779508f660bfc58bb5723562380dc000d98fec95b92ce60d632e59","first_seen":"2026-09-18T05:08:27.365418Z","last_seen":"2026-09-22T21:13:48.411111Z","times_seen":14,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/config.js?1790111524407","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:04.412Z","timestamp":1790111524412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /platform/saxo/config.js?1790111524407 HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xy2AggsXfcnb41krDla0mfVg2h61Kk0CwhkMgpkTvRJnNjb3EGm3lofgMwjSIpm1RN8eaCqK5FpS%2BG%2FE9iC8N4Yh5QcQklnBGRjk4DExso7VVnoAPeRxjT40A%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4c-269\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e439f07c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":617,"size_decoded":1071,"mime_type":"application/javascript","magic":"ASCII text","md5":"14d593b92101d6d23922da09ed1f021d","sha1":"a758a2e0e3caff73eeb926a698eaee50818c69f5","sha256":"ff7bfe47ac89974ebc77a25cf412e4c0b93aede8f0e50ca9b426a18afaae7773","sha512":"b2da5eb232a4e4f5e7989b4c2076351a0a2eaebbfc0a69c6a11b9812a67dc37902d85e6e2d872a521b657ca57856b686ff770ca1037e89ec0081908d407a9821","ssdeep":"","tlshash":"0df00c41f2b49c281940492648c710acf9610b774a0d3c7df3aa60102f0c89b083a16c","first_seen":"2026-07-10T15:16:49.431278Z","last_seen":"2026-09-22T21:13:48.422916Z","times_seen":33,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/#/home","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T21:12:02.804Z","timestamp":1790111522804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:03 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DviYfsONsGYn0QhnrYeOCuzaquOe1I8SpynwsmYkobSpk%2FyDBnnv42DhTv3lMNv2MBxTA2ypxzIB2Jyw7KM2YcEhkrdlhMSGFGIgAS01Ozh%2Fv25JzaBMKYEZuw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e398ce2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3211,"size_decoded":1884,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2085), with CRLF, LF line terminators","md5":"9014b80d13825ba82986c9fad6effb4f","sha1":"5f437ea4f1472b814b67174109d74faedb0d4ff6","sha256":"5c30860ba77a11ce1be5a2dedd0ba14c7f9ee2928b672a0d75f757049a2312c1","sha512":"80358674c3b9ce9ede1b85d155190f7c2de6cb91b295762892179176da819ec664b91e4ae464ecaf638c7531ab568f9effc67d69ee916da23f9071c8da624408","ssdeep":"","tlshash":"606160b618b0d81e237001bedee77018ce25129a86065e6575cd54ee8ff5fe480cbb65","first_seen":"2026-07-17T15:46:52.025962Z","last_seen":"2026-09-22T21:13:15.697315Z","times_seen":13,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/index.a66d74f9.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/","date":"2026-09-22T21:12:00.743Z","timestamp":1790111520743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /assets/index.a66d74f9.js HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:01 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LJGP%2BK1CqALCPnMnII%2FK8o%2Bf4JD6vH4KfZKLISB%2FZAOQ1%2B7%2FwUrFjWackaJO6Vdq3%2FM%2BldChYCSu1a%2FXo5FPP9fUql8v8YbsobqlTFvqAbdYFVb4ShmjJqLQew%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4f-6b97\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e2caabdc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/favicon.ico?2.0.1781365838952","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/","date":"2026-09-22T21:12:00.170Z","timestamp":1790111520170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /platform/saxo/favicon.ico?2.0.1781365838952 HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:00 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sbh03uwWGute6lRuf2P%2BVxYYJ%2B50%2FSfTj%2BOvE28dNWbqduNiqrDfX73CIDlIKVh8bNZa0FavJJW24hTW8b8Mzv7bu%2BieUTMejVknPDZutwnOj1eEII6ZlNB8qA%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4c-3c2e\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e291a0ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":4105,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"14706820adb4c4843f9242233a8618bc","sha1":"d275e865ed012a66805c08e0eb596aedd24ac30a","sha256":"d69f487ef628fe2f9cde86e4e1b6bacabb2920086a904a0a97b266678ced6014","sha512":"a5211af91386b8a0b66ce22f2eee3ad4d7a42b65768612672d7deb0e6f19b5f858d1203df7fb36697d0e9de6dfa02c5cecace545241000da4ba846ae30252661","ssdeep":"192:B/nVCcXJ7HY8QrXD6jTNclnPb3Kw5M2zPyJaf9k:BfrXJ7HYZqTEnz6crUaf","tlshash":"326264b26a6011e7c9bd4335039acf6922f5ffb175607221d2b179a9cb3e3402cc5e1a","first_seen":"2026-03-09T14:08:14.085533Z","last_seen":"2026-09-22T21:13:15.6855Z","times_seen":24,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":469,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/platform/saxo/logo.png?2.0.1781365838952","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.251Z","timestamp":1790111525251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /platform/saxo/logo.png?2.0.1781365838952 HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=5,i\r\netag: \"6a2d7c4c-a323\"\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uYjSw8zJ4ELP49QkhicpVVx0gVF79lX0SWdCB76CX1DH1wcJ%2FcYRNCJqcF4S7KkdTqWw1dDszRG4pLhvW9esgrC6TprSgbqgXO11jJbOR2RRdyA8Hv7eHTZeLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e48d89bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41763\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41763,"size_decoded":42449,"mime_type":"image/png","magic":"PNG image data, 1320 x 573, 8-bit/color RGBA, non-interlaced","md5":"adcd1af6555b72c9b76f33c8bc712bcc","sha1":"740f25940dc9d304451004e52d54cf73033c9434","sha256":"d76340db7f354f57fced45c1f6a66af1064144236e5274be4a78cc049f5bb55b","sha512":"fcc674c4131650ff52012f3e888c48c26ec7d4403e349ee67ad31c3b578f3134b6772ac2d5d5bc1eb0b513aff2866775a7d3e61205a251d02651916d525055ad","ssdeep":"768:U18pMgH2/HTxPyuyEr2qoYxaoZNyP8LlzD9h8tys/RXsYKpxFSyMdie8UuixwtC:ZjHm6Gr2qjsQNyglzHSz/FsXFFMdKUuk","tlshash":"8013f1e59bdd48dbfbe478b834ed85383a84374611eadd00b40caafa7d9633f0112291","first_seen":"2026-03-09T14:08:14.104151Z","last_seen":"2026-09-22T21:13:15.698777Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.salesmartly.com/plugin/info?language=en-US\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111525732\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"widget.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.744Z","timestamp":1790111525744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 21:51:06 GMT","end":"Sat, 21 Nov 2026 22:51:04 GMT"},"fingerprint":{"sha1":"DB:AB:9E:78:CB:E8:C8:0A:A9:8C:FE:88:39:5E:BE:DB:7F:20:7E:15","sha256":"0D:B8:1F:90:BF:A4:B5:3E:DB:C8:A7:15:63:42:C3:A0:A8:91:D5:19:74:6C:7C:C6:4B:BD:4C:91:84:69:37:3D"}}},"request":{"raw":"OPTIONS /plugin/info?language=en-US\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111525732\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: widget.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://saxox.cc/\r\nOrigin: https://saxox.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: https://saxox.cc\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nserver: cloudflare\r\nx-request-id: 58799a6f-91ad-4b46-82d3-d3e1be0f4e93\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3f44e4bed9d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":700,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/waihui/ethereum.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.259Z","timestamp":1790111525259,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/ethereum.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: c6UC6dn6USJsRPH25YUtXvMQmY58WD27qz2xXrie2Q+grJ3++nMo9s2dKji3o+qDqr0uXhVQPCU=\r\nx-amz-request-id: K6G8ZMR9WBF1EHYW\r\nDate: Tue, 22 Sep 2026 21:12:07 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:35 GMT\r\nETag: \"12d9722461759cefff02d9076a3d2718\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 9807\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":9807,"size_decoded":10335,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-09-22T21:17:26.907789Z","times_seen":912,"resource_available":false,"data":null}},"time_used":2057,"timings":{"blocked":-1,"dns":0,"connect":285,"send":0,"wait":310,"receive":284,"ssl":1177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/assets/index.b73bb044.js","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:03.097Z","timestamp":1790111523097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /assets/index.b73bb044.js HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:03 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wsWPICtJ3xBzQpqMxc9CWknXQTW6%2B84j2HBzgATU6XEsHkYNoQJVDwXJqdVZJI2Mqd7nHwYmCsechgkLsrfXAl3EPPLGfLcRK5iDzXDIzxqtG%2FYNxq77wAUXGQ%3D%3D\"}]}\r\nlast-modified: Sat, 13 Jun 2026 15:50:39 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a2d7c4f-5956db\"\r\nage: 5\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f44e3b5d3ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5854939,"size_decoded":2784420,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17616)","md5":"1083ffca9ff3b1067aca3ccad6718677","sha1":"b0ed6ec6bb063ba98d2afba876292e4674deacbf","sha256":"5ca7d5cce59932f83238b2e93d89f0cf5b74dbb3be352c094d56e6ff5d329f5a","sha512":"1f92224015060b149673b6a919da3282c73c368261e18683f683566829117f9983d7536e92cf280ae0325c187370ee1774077e1d88eeedb86b226e923f23bac8","ssdeep":"24576:g2XbTtqHpcjWmF/5r52ObM7pamK+hCg9Akvk0n3DG7i:g2XbTtqHpcjWmF/5r52ObM7pamK+hP9d","tlshash":"fd254a9474a5b071a3fa45d8807b0501b32d1b49b405d4f0f1fe8eae3a6ad14a2bbf7d","first_seen":"2026-06-09T18:59:45.493537Z","last_seen":"2026-09-22T21:13:15.661257Z","times_seen":12,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxox.cc/resource/images/common/home/downloadimg.png?1790111525141","fqdn":"saxox.cc","domain":"saxox.cc","tld":"cc"},"ip":{"addr":"104.21.44.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.305Z","timestamp":1790111525305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 02:03:40 GMT","end":"Fri, 04 Dec 2026 03:02:06 GMT"},"fingerprint":{"sha1":"27:A8:87:D1:22:83:37:F0:07:B1:A7:5A:B3:1D:BE:32:8A:92:80:20","sha256":"36:B9:AB:50:4D:4E:43:6D:A9:3E:72:C0:44:A2:5E:37:42:9A:BE:D9:00:B1:E7:CC:4A:FE:D9:07:3A:76:DF:3A"}}},"request":{"raw":"GET /resource/images/common/home/downloadimg.png?1790111525141 HTTP/1.1\r\nHost: saxox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:12:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 13 Jun 2026 15:50:36 GMT\r\npriority: u=5,i\r\netag: \"6a2d7c4c-22e9a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FfX1tOxMbNr6%2FeG9QC4fRCCPwdE%2FcRAriCQE9%2FKBa4fuonqj7Qg5D3loW2xyNW5d3DCxeiqmqHMqIvd2XlVE0mk0JHZfNEzRyHGUbYGMOSyGLPdo7xlXLUxM2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f44e4928acc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 143002\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143002,"size_decoded":143687,"mime_type":"image/png","magic":"PNG image data, 1368 x 972, 8-bit colormap, non-interlaced","md5":"4e59e1224e1c27738197d0b1c328c15c","sha1":"84f186b75c956ae9b5ff26b8d0e2b32ff0492e98","sha256":"1811704cad965db80f02ccca4a90b177600997e3c26128f4fd5a15e0dace500c","sha512":"7873a8c641cef1cc30fd926b9f99f558de23adca684a4c61c6d439b791a3e35a539d5c4da8970957d0fc1d1aea6a11939685779a41990f121c72a9426d085774","ssdeep":"3072:ruhlDWNa+r4srR2T+P9OkmGgv8uN2u7LM7xJNVewRLUhJJg8:hBrjAXEw5uJNVshJJT","tlshash":"6ed31283113a1650cdfefefb4a158f47861629b4c81ca35e5ebb29caa155f03f3a1603","first_seen":"2024-08-19T17:34:46.648366Z","last_seen":"2026-09-22T21:13:48.406676Z","times_seen":174,"resource_available":false,"data":null}},"time_used":1102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":652,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"saxox.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget-v2/code/modern/css/plugin-BrcH385T.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.478Z","timestamp":1790111525478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/css/plugin-BrcH385T.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Thu, 17 Sep 2026 09:46:54 GMT\r\nx-oss-server-time: 5\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6AABB70EE5F8053639368385\r\nlast-modified: Thu, 17 Sep 2026 09:41:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15254958038375797185\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: siAwKLOc/5iWX5dXxRsacg==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: kRyPl2legEwo-6tflqw7_BvX7M02tJXeNZBFwjv7grs5ow91gL6Teg==\r\nage: 473111\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":328964,"size_decoded":95226,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b2203028b39cff98965f9757c51b1a72","sha1":"2937238582042315a986989886fed3e92ec35a5f","sha256":"98d7ef1f37cb27fa4295a5e516f641fd6e6240936d3ed2b6b561fb958e4e6cab","sha512":"4e3f2e0a419d5ff43027e37eced3f4fd62b2758359e8daf6c4b221d66a853eb03358368ae5393975c2c3d74801fe409077f34442aad2958fc3ca01debc305aa7","ssdeep":"6144:JFoXHJxcnD595VSSTDSv8MHz3xQRcOcOc5mjeiwORywd:JiXonF95VSSTDSv8MHz3xQRcOcOc5mjl","tlshash":"a864297ceb10313df937ca116ad0b29c6038a0e7feb20d9dbe557219c2d60c946b5a6d","first_seen":"2026-09-18T05:08:27.044503Z","last_seen":"2026-09-22T21:13:48.398389Z","times_seen":14,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets-cdn.salesmartly.com/prod/project/g15vjnp/p1/integration/plugin/image/20260303/1772523250960/image_1772523250960_f472913050e9e53e957952c14dd.jpg","fqdn":"assets-cdn.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"143.204.238.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:06.331Z","timestamp":1790111526331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /prod/project/g15vjnp/p1/integration/plugin/image/20260303/1772523250960/image_1772523250960_f472913050e9e53e957952c14dd.jpg HTTP/1.1\r\nHost: assets-cdn.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 22802\r\nserver: AliyunOSS\r\ndate: Mon, 14 Sep 2026 06:05:12 GMT\r\nx-oss-server-time: 26\r\nx-oss-request-id: 6AA78E9865E667343208ABB3\r\naccept-ranges: bytes\r\netag: \"8B446FDA30A45AB498B3C7CB4ED0EBBB\"\r\nlast-modified: Tue, 03 Mar 2026 07:35:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6177285399023215200\r\nx-oss-storage-class: Standard\r\ncontent-md5: i0Rv2jCkWrSYs8fLTtDruw==\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 217e7e1681602f97edd05a1be6d5e5bc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: H5c8o8MNK8Wt36UkO50MRdeJLQCFWkqNAO-X24NkubDnZoIqpEZjPw==\r\nage: 745613\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22802,"size_decoded":23482,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x640, components 3","md5":"8b446fda30a45ab498b3c7cb4ed0ebbb","sha1":"bf6b82059acd0cb857699cbfb772f09a36e2ce3d","sha256":"d0e2db92c128bcae60d2e9d3d6cf48940df98f2d3810eba91154f6f21ad6dadb","sha512":"d25df31479f9190eae11dd4b7abcd8057adaaf4d58a8bcac8deefa0b66434ed8040b6fd99fdac46dc3ceba19318c019d052f87294c310710a64133e459b68fc5","ssdeep":"384:wI1UJ4NYPccn/szU4HJGQzLudA1obnOaicQjrUUUANUXidiIwUyndtF73GayNUO5:dUwy/+zJDzLudnbnOaicir1UAKSYIMjO","tlshash":"fca2d045a33ab328f8c434f541e34701c21977a7ed426784b2b829d8b778f6a5d61178","first_seen":"2026-09-15T14:44:52.089432Z","last_seen":"2026-09-22T21:13:15.700738Z","times_seen":3,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":0,"dns":81,"connect":86,"send":0,"wait":38,"receive":2,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newbasset.s3.dualstack.ap-east-1.amazonaws.com/waihui/XAG.png","fqdn":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","domain":"newbasset.s3.dualstack.ap-east-1.amazonaws.com","tld":"s3.dualstack.ap-east-1.amazonaws.com"},"ip":{"addr":"52.95.162.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:05.265Z","timestamp":1790111525265,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A7:F1:CD:91:63:26:17:DD:4E:8D:17:D4:48:3D:19:E9:07:B6:A7:DD","sha256":"89:42:80:13:A3:1D:7C:CD:5E:F4:48:52:54:A6:E6:44:DA:DD:B0:A1:54:8E:BC:7E:D4:15:B2:FC:B6:6B:53:4A"}}},"request":{"raw":"GET /waihui/XAG.png HTTP/1.1\r\nHost: newbasset.s3.dualstack.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 1v0r1m47Vh8YVenDRJRVWLRnC5IenCOnXgfJrd0TSjFB4cuvFlgG9g4GvC/UkGTj0AGil9aS1FA=\r\nx-amz-request-id: CADXW94NVKKMZ2TC\r\nDate: Tue, 22 Sep 2026 21:12:08 GMT\r\nLast-Modified: Wed, 26 Mar 2025 12:15:36 GMT\r\nETag: \"5d36743437c9cab9218922a72775f9fd\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ba878334f20401dbccb089792dfebdac5e90f8db1cc2e7c5f5365a1cc58e91f9\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 659\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":659,"size_decoded":1186,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit colormap, non-interlaced","md5":"5d36743437c9cab9218922a72775f9fd","sha1":"91383aaf31fa9eec0805bbbc40ca5cd0a7753419","sha256":"ba878334f20401dbccb089792dfebdac5e90f8db1cc2e7c5f5365a1cc58e91f9","sha512":"ad6a46a947518469fed771943f64f6ecc450519526e44810ab880872b7a189fe912538699ab50b65ac1521cd45dae7a1b1c542e3771c479d3181649e8ecdbc96","ssdeep":"","tlshash":"2301c88773cf2d28c15a1d63e939bc191573024a5017cf0e86497daed3b3746825f117","first_seen":"2025-06-23T17:22:26.279809Z","last_seen":"2026-09-22T21:13:48.396814Z","times_seen":146,"resource_available":false,"data":null}},"time_used":1992,"timings":{"blocked":-1,"dns":0,"connect":327,"send":0,"wait":340,"receive":0,"ssl":1325},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saxox.cc/","date":"2026-09-22T21:11:57.300Z","timestamp":1790111517300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Noto+Sans:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 21:11:57 GMT\r\ndate: Tue, 22 Sep 2026 21:11:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6340,"size_decoded":1454,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b75d27687a21c4b72f4989a39e5c7264","sha1":"f6ed9fbcaec50bd8aa5e887db9a9a84163f04110","sha256":"cf3312886f57bb7a94363d780e242890d34ea132e33a55c005bc35b4343c2e56","sha512":"53fbf921dc3be172163a0bb72d7507111d8dc1d6e9af731b6f0a84d28445af5c0785e2ccd9997f5a221b6d24172c1b80eecbb09a47558134e80ff371f577a29e","ssdeep":"96:bOEbaqLOEbaCFZyOEba/OEba+OEbax3iOEbaIgOEbafJc+umOEbaTN2OpbaqLOpB:Mq8qg9x3xI/7WSqRbVox3cIO7HC","tlshash":"e1d1caa8805bc484ba434cd637df7d36ad1f61212454d27c9bfd59989cabc39433178e","first_seen":"2025-09-11T17:29:37.380652Z","last_seen":"2026-09-22T21:13:48.395738Z","times_seen":16334,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":3,"connect":21,"send":0,"wait":36,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-auto/user/trigger?login_token=19c9f62c80c1d4ca2e3f7a49315f617b\u0026chat_user_id=cda9f2edae28a3010ef7877b5a951f39\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111527167\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saxox.cc/#/home","date":"2026-09-22T21:12:07.176Z","timestamp":1790111527176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 04:42:20 GMT","end":"Sun, 13 Dec 2026 05:42:18 GMT"},"fingerprint":{"sha1":"F9:F2:70:DC:53:93:39:01:54:CF:90:55:DB:6A:8B:3D:22:F5:16:D7","sha256":"4A:5E:87:0D:7C:E3:87:A3:56:83:F1:04:52:E1:67:A1:48:FA:D0:98:64:99:0D:ED:06:94:87:56:72:97:E9:9B"}}},"request":{"raw":"POST /chat/chat-auto/user/trigger?login_token=19c9f62c80c1d4ca2e3f7a49315f617b\u0026chat_user_id=cda9f2edae28a3010ef7877b5a951f39\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=g175k1d\u0026over_time=\u0026env=chat\u0026_=1790111527167\u0026_lt=19c9f62c80c1d4ca2e3f7a49315f617b\u0026_u=\u0026_xma_=499010 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13\r\nOrigin: https://saxox.cc\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxox.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"is_new_user=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 21:12:07 GMT\r\ncontent-type: application/json\r\ncf-ray: a3f44e54d9710883-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://saxox.cc\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 5aab4a47-b1e7-4625-a88b-4d38ac1dfed9\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":710,"mime_type":"application/json","magic":"JSON text data","md5":"6b210154a96c28a41ffbe341a228c02a","sha1":"2e5751bde9f2323a79989d165f22ba111624ab76","sha256":"57109c9877bb6690c6284c7b2b98088071ee4762449b6b5659dd908bf9d703e3","sha512":"16fc9ff07ff4e167be6b24dad448fe7479cb1e5b50d5e7f251c84852e4c67d8caff68a1eae5be69b8f4561d97bc6d41be026597033718181025b3a97c7e292fe","ssdeep":"","tlshash":"89800023282c2c830e0238cc880e8b8820e820808e200330cc8ca228cb080a8ba82830","first_seen":"2023-06-30T01:11:08Z","last_seen":"2026-09-22T21:14:40.569372Z","times_seen":2381,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}