{"report_id":"11f129cf-ccbf-4eb2-8cd2-af866417eb70","version":6,"status":"done","tags":[],"date":"2026-02-03T19:09:46Z","url":{"schema":"https","addr":"dapp.vetrn-vip1.com/","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/#/home","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"title":"OKG","dom":{"size":267,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"020fc05204970ecf4a9fdeb90e9e73ee","sha1":"003bd7eb96b3d5e6e294ec96a9ed05f94b55c65a","sha256":"7b1596bf2c45f9e1c212bf8e300fd760661bd9f2244b2aa47389f0db1e6a28d4","sha512":"731ff2e865d1cd9f83b292721637144aad12f84a93497f8d852aed7ec5eeafcf57dd0e7648b9ab1b9c3d4eb0df12ff26ed4c483460c6debb047a0ca3bac621f3","ssdeep":"","tlshash":"45d02b6fcc22804e4d0116e48992b50c894ff10f6a18ce4ca8f12478e11969e14a164c","dom_hash":"domhashe9551ca6980fee53ee15afe26c1cd5b2","first_seen":"2025-11-28T19:45:51.505999Z","last_seen":"2026-03-04T14:51:39.037512Z","times_seen":338,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T19:09:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T19:09:23Z","timestamp":1770145763,"ip_dst":{"addr":"Client IP","port":50958,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 52","source":"{\"timestamp\":\"2026-02-03T19:09:23.339637+0000\",\"flow_id\":1936445193569631,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"202.95.15.34\",\"src_port\":443,\"dest_ip\":\"172.18.0.23\",\"dest_port\":50958,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400051,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 52\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-02-03T19:09:23.050527+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"new-api.meiqia.com","ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":987273,"first_seen":"2018-07-31T06:41:30Z","last_seen":"2026-01-31T03:00:51.314614Z","alert_count":0,"request_count":3,"received_data":7153,"sent_data":1929,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"static.meiqia.com","ip":{"addr":"43.174.14.42","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1675070,"first_seen":"2016-07-23T03:30:52Z","last_seen":"2026-01-31T03:00:51.182676Z","alert_count":0,"request_count":4,"received_data":1434628,"sent_data":1834,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"camorope-client-a.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1631624,"first_seen":"2018-09-20T04:36:38Z","last_seen":"2026-01-31T09:15:50.113639Z","alert_count":0,"request_count":2,"received_data":1006,"sent_data":1341,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"edge-api.meiqia.com","ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1537350,"first_seen":"2022-05-13T18:55:42Z","last_seen":"2026-01-31T03:00:51.954713Z","alert_count":0,"request_count":2,"received_data":2055,"sent_data":1133,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"dapp.vetrn-vip1.com","ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":65,"request_count":65,"received_data":6283212,"sent_data":32211,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/4959.c4fe8b3490372623.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c565ec0e218b7b0d29b683e453c23f63","sha1":"df587fe1358957fc20b60dfc78fff359788d592f","sha256":"1bd7679a02e04b05140f0de52c59895a94c3df7f49665f97ed7b1168d5c8ce6d","sha512":"1943ce150dbfaa53bc65eb3ddb6a2d18352b6e865ebb2ba002a50b62757659480322cd654f4b2beffd40dbd6db1e01782cf67ed28fc99272100a045ba65a639e","ssdeep":"768:U0AaQv9T2Ul5yTQvWlaYYw8Ffc4rLy5WSM:UHvy1laXw8/PygSM","tlshash":"c1f26c663083f47ddaafc026213a1120683a3feaa465c489f7b8d9996fc4d641f0d77d","size":37374,"data":"","first_seen":"2026-01-14T15:30:02.387382Z","last_seen":"2026-03-12T14:13:04.95471Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/5371.eb5eec9fded3a249.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"846747923a82e4c8f6dd33aef82cb120","sha1":"89b4bacea37a7a5196707e08b0eb9c50cc0ca3ed","sha256":"1b7efeb048f7db7f21ea0cd7397d5e5bbbffa031915001a386b4e18f0866d6d9","sha512":"7c1531ef2213e2bf375d9c43e79eef234661150c113f15675797871e8cbfee7428d9d24b4f1d2229bb08935bac9d9e08dcd5122b19b3babf9ca1de270988b781","ssdeep":"192:bIhL/PcoWcwfVZylONLBlYE9M4M5gA5PGI:bCL/EoW9fV8lOlBlHZA5uI","tlshash":"6322c689f2c2f821175320e5a05f1102d36a765cb41b449df576e8e26e6df8c62baf3c","size":10458,"data":"","first_seen":"2024-08-20T02:34:44.568838Z","last_seen":"2026-06-03T09:56:52.901702Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/2814.efcc1da6b99ee0c8.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbcee8190f2b863c9dcb8c8eba5b208c","sha1":"724186a85031e0c22692edeed69cc1079ac8c5f8","sha256":"d27ef9cc7fe248e38c01be4877c3336ed0644a7c4583ec16ef1f3e619f30e3f6","sha512":"e5f9c4eecd47ae5dc6868d46597e6127956a43f331a6d6d66fbf3bc2f17f2bf761c6991b4abb629015e2766cfa70ccf1203b9474e96d8aad84dd4d851da0fe4f","ssdeep":"6144:AsA2XSZF9I/sNHC6DEolop+obMS8LxusaEc3s9m:rsNH7DlYMJZaU8","tlshash":"a244f794f396b0258696a075003f150bb2362454a4cbc5ccf279dae96ebc88d36b7f3d","size":276811,"data":"","first_seen":"2026-02-03T19:10:00.071807Z","last_seen":"2026-02-03T19:10:00.071807Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/Home.227c92c7a2d13d78.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7fef8197fefc83ef3bd2b42df8745d6","sha1":"526d4d8429dcb708d8eea0df50e3a11244da551a","sha256":"dc5f5d8017f47a62ae329d37717a1876952f63725b627a955f4d643e1f0f51f7","sha512":"dceeb7d1669d68ebcdee9cafe39fe576ff68944446db802dfebf912518470feaee18e39b0c0e80e0b3541cde8181f46e83ac7f78aa7807c73cc4a11239e59320","ssdeep":"24576:GC7aEpmO+Q29WHlBe3Hlt+AUT4xk9Xncf862k2K4lDw9mnoZ:/7aEURQGWHlBe3H/+AUTd9cn2K4lDBoZ","tlshash":"99a53bd87280b055c3a326a5406f500bd33a7d586c4d4558bb27ece76cbca9a623bf3d","size":2255652,"data":"","first_seen":"2026-02-03T19:10:00.130647Z","last_seen":"2026-02-03T19:10:00.130647Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/entrypoint-v1.5.5.prod.20251128_164.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.14.42","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1745aac366a0fd580fdaa1f5de861ae","sha1":"b9fa4bcdc30e775656a0485cbeea7ff6bd4eeabe","sha256":"20b7430e9ed5da2ea82f9fb50aafce7476e531219989ccbddbdf66749a4328b0","sha512":"3150e2a3e9bad6218010c55f184401815ae85f470fe88c821e14b3f9c4b8327f048dc1c4e28e2d52fbb4cc8481927ecb724e0282fee96fb29c8a9cf66e43d5d4","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbM3Zh:+llOuU1C+Pjv+1o+9YW","tlshash":"c91408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","size":194416,"data":"","first_seen":"2025-11-28T12:22:00.181302Z","last_seen":"2026-03-06T01:26:04.909446Z","times_seen":540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/7139.589a901ec7c511f6.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"30f0a2ac961f6717ba8cedc9313e9beb","sha1":"edd541ebed91619b5b0466a273c11e42689f751f","sha256":"45a9a729aac77e2b97337f2091895845662e9fa4e35867f6e09dd7de64c9aa26","sha512":"70620657e85c3e8a800e8d83b2448257ca9b30aa71a55a4d58f027f5a2ed6a4df482fd3e9453eb9a33679a1d1ec5f74acf23827bb4c255365bfc27a8f75517e5","ssdeep":"384:u8QAThSj5mZN06saYULFxCf2xXr07ygzLnXMHO1Nn1zBxr41m89:iATMVmZNyyLFxCOVmjzbMu1Nn1lp41l9","tlshash":"1b920acd76c4f1a206d791b6409f000e72378929510e9810b595eaed2d3ddbea37be3d","size":20149,"data":"","first_seen":"2025-10-31T04:59:48.192844Z","last_seen":"2026-05-27T16:33:56.384165Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/5181.acc5b97fefcfc7cb.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b88014927e959a9b08dd135f3fd6815","sha1":"cef208f06852ec71352271b6152027c63a3c6547","sha256":"b1eb48143fe47c645c08a585137c3e86ac2304efdba8efa0ec6635add0071b0e","sha512":"c34e8f9636b90dc1d9ac89bad9dad701adad899baa95d158a7379fa2db32bdf465be24635028639c8b7581f602aeb9ba7e9c3f130ddf11e0512821616fca9911","ssdeep":"384:IJveNZbezeBO3G3ecDyZd0MYQwy67r1rm+Q7IR4eTInEfU46n7WT60h:o86eBO3STDyZd/YQwyMvR47nEfYQ6E","tlshash":"37c2c06da2a9e5ee37dfe2fc750fc46dcc37ace9f00c92069a74e5886de5a450036510","size":26526,"data":"","first_seen":"2026-01-14T15:30:02.515035Z","last_seen":"2026-03-12T14:13:05.043623Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/dist/meiqia.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.14.42","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cabe3635bcf0a2db33b4e924a83f84f","sha1":"dc1188b1f0cf9a08095984897454427da574bb6e","sha256":"13e0593db078d5f1f99544cd9aafbdb1d1eeb8777677b3d001bb1cf66819ac4d","sha512":"3941a8a8b3c277aa60a8b5931e6c3a85d38263a1351ef42e9083266c429f1e3f0f25b08dd8a85d8c2e60dbb48360ea01f419d6cde101a470b11ab658c5302385","ssdeep":"192:K04adJyHIJgekJElGZQz6cFDZsWBn25HrlT6NKSn2QcWByxGmsHZQzq7vE4o7oKq:oHik+BbF904Nua2Nqw4KoKNNlYWC","tlshash":"c9723fcdb5c2b0804ba36160422fa81bf2775aa5745f98c0a365d1f8ac7994f80b7f2d","size":16342,"data":"","first_seen":"2023-04-07T01:00:08Z","last_seen":"2026-06-02T03:15:54.772888Z","times_seen":1991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"99aa372a254d4670aa31285090da7e89","sha1":"6c75ce54f5db3a8c75041e61654bd9994e2fa422","sha256":"6aff6edb997d7f8c831759fe203017a051c9419bb262bd33cbb4350ed6391470","sha512":"b1ce7035cdf8897835233b12c77b0d2148de6b1e07c26f9e739352d05982e7378c5c5e1b568fa3368f013335a565b6be789ac5ce3f47137863d6f110a3be82a1","ssdeep":"","tlshash":"c0e0680f249b003811a7e0fe2faf88083490710f4118cb26bd5dd5079f269290f43f0d","size":418,"data":"","first_seen":"2026-02-03T19:10:00.138422Z","last_seen":"2026-02-03T19:26:12.331019Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/chunk-vendors.8236cd7be611f853.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba0e3b17d5082831822dadac68949820","sha1":"07a43c21bb7f96fc852559099d13d9ff9e3c6f83","sha256":"0a3ed66743c14c2c8fdc5ce36f3ff726d3484e106c425978364e137c3143b601","sha512":"2078161d3e7f0c433000a46110794f0a9b7f6d642956340cbef535856adcfeca7779b5e5162bfe1f81a32cc7061346fb401c1f9fae6b1e2fa71691a37dff1f60","ssdeep":"3072:CaWtsgg1wer2zcg2rUgM4HuiLoG3jyCnU91wSXJnIdJ9ATnduP+BydIML31LA0vD:pWtng1werP4t4HuiLZyp1jUdA0vliAC4","tlshash":"cf84f7c9b295b07147e720e4407f150bf23aa929640e84d4f265e4e6bcbc99e913bf3d","size":407276,"data":"","first_seen":"2026-02-03T19:10:00.147736Z","last_seen":"2026-02-03T19:10:00.147736Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/3933.61c88f3610f7ba43.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6f502c1967279ea9dcde16e992de8ea","sha1":"986cfab3d030f354a5bbdced9c52ed5699c111d5","sha256":"24be5cc05161f5c72faf5594ba55a0fe0a94e1ad61786f25208cc663bc82f7d1","sha512":"070652a1b4f426a96bb303021553a93a86a996676f1ca01dd2891b8e23ca32c1bbdc7edca257d980ea2d669a0d1b3d174d8d270dadcbcaaa0d14741c93617a14","ssdeep":"192:dbMLbXNTikaIxAAfi+uUjZUzZmP9TPouW9F8:doLR8Ixvq+uUVU1OwrF8","tlshash":"4b32730972c0302297dba056801f170661373689ba1a85dc7679ecf5ae697bcb02ff7d","size":11138,"data":"","first_seen":"2024-08-20T02:34:44.555971Z","last_seen":"2026-06-03T09:56:52.893121Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/8725.3a6a18fc057a7be3.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8ac5edd56649b1d5dd62018e7134a22","sha1":"ac9c39a2049a6667677db5741a8cd9ea69402da5","sha256":"92cc708aaf710c8001206620c23045daa342b9200f9037b1c156291d510ce90e","sha512":"1f1513c011196278b14328a9f660e8deea5ef38cee32b625b7d46795b05515d043aa5586ab716196ef4d5e24a2e1d502af90baf6e091163071921a61aa5334b0","ssdeep":"384:Zddn1feBBnyL1/gQ7znBVBOTNBdBAjUDNgNGGFG9wunpOUXocRzRDCChvctfe8Wk:ZdnePny5YkmgtG9wunymVAzt/Qq5IbGP","tlshash":"c4a2494cf4e2f06a42e766b5507f252de23b3dd4ba0b44906b34e4867eb458d6273e88","size":23371,"data":"","first_seen":"2026-02-03T19:10:00.014559Z","last_seen":"2026-02-03T19:10:00.014559Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/4972.e77dcd8cf8ee100e.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3fa68b4628207a8e8532585287c6152","sha1":"95c1151298b72a9d7c5f9daf15cb51afb57c90a9","sha256":"6ba8d8fbcb0cb02dd91be2858be02fa98978b79e2692dd4202ba3f4b9c8728e8","sha512":"2f8b25a360be42b2d0aa42ff7e312ae90e0748eaf921b8465b2b610482cc2095e096388e94902953346aef316e8db1a7428edb43afaeb669b5a3b24adc7a4a91","ssdeep":"192:SKzlz01Zc/0cpNmX9GDQ+y8ozO10yGLAXIn+E7k7h+Zt:SKzlzkC0cpYX9GDo8oz+0/A4uhgt","tlshash":"6a42868bb1d2f4065783a074042f5506a63b1e99741f899cf97ec8c6ed3894da13bf78","size":12024,"data":"","first_seen":"2025-10-31T04:59:47.993568Z","last_seen":"2026-05-27T16:33:56.511019Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/5243.7084f2ab8dff968c.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"add4094b01c74ae82100089e3c0cd6a1","sha1":"8f49d4262e76e9d1a3e6800415173788d00bef05","sha256":"2cf5089dc41c08e89fbc8661073faccb37b1960ec81de7768530ab4cbc72fb24","sha512":"ea3c77dac6f1f81b165419c6e7f60b64b26c4273412367562089d3f710a9e2e7c6cf609ff2716a1945c9d6a65342c0f93b8dd2738c82bc30d9932c90e8ec666b","ssdeep":"768:rzZ6Y79UoFMhDQsbMGueYWbv7nMDwSbWZYlZ9lLLytWODGDzNatsOE9tFpgY0us0:rcEQCs0Z9t2Xi0uv","tlshash":"7af23195eb08e89c2c31d01a2c9a61d45a6d7f62a48d415a3cbdff5e39e0f78020df39","size":36777,"data":"","first_seen":"2026-01-14T15:30:02.395556Z","last_seen":"2026-03-12T14:13:04.963652Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/app.94a4d8c47c884aba.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"423e970f022a4a3bc78d84ab51c7da63","sha1":"16f2b8db4789182bbce647f31c2a470efac02d5b","sha256":"41caf432a4180646adcd34348f0289412001b9092621bfc7685342ae9498cc47","sha512":"2d1c2f3114b06a9b5772cebe70d6efbc5152a989eb8d3c8222de728ff8266c7cbbc936b78c2d13ebe33a0afc276e9e06b71df4de262fe42750a4a5556c8621e5","ssdeep":"49152:EiUaEPKl9uftGt/LMczrXR87XjmFrZ0ph:+g9ktGtT5OHmFrZ4","tlshash":"3095af7b23c69af814470b42a29b31486169ae57f753fcf044ed952812edbcbc112ef6","size":1915479,"data":"","first_seen":"2026-02-03T19:10:00.157231Z","last_seen":"2026-02-03T19:10:00.157231Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/5221.f9484730d4eff7e6.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b575928c2d23639e5c9b9c194b2fff19","sha1":"ff0dcb6d3c1d9bce855729336ec48c6d98837059","sha256":"3c981fe89538d2220deb835895fe6c1a90aa001501de309970b01b627ed0eb10","sha512":"37d0c38935f4dd6a29b6af91c1bafd5e87796eee6138cd0189b6c07a90c2bc6cad03eaab5ac0f8949b46134794570e28111275d5c4eec82b67bfac4525d8e26f","ssdeep":"192:YFMO1Bk7oIj68x/xTZmCEoq/RC4dCOPDGDF9hvawnI9WzPHXJ4MZK++FRlyZ4T2:Y91Bk7oIj6k1j0RRCO49hva2JJ4ZT2","tlshash":"1a32b74d70d274ae268b0065007f5311a2323dd8989a985cbbbdfce56a5dd6cb03e7bc","size":11387,"data":"","first_seen":"2025-08-04T00:26:37.974861Z","last_seen":"2026-03-12T14:13:05.148565Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/3850.67819b25993268bf.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5fd502f4f9ca512554c43de9013c4e7","sha1":"cccda83add870411c9ff33ba1cb6d145e71c6b9c","sha256":"c7a31c1095c49d542f74a5c2e5524172d71b46cc1e3d4531b0a48cfc1d4a10bd","sha512":"5ec6562ee180221861150ffb4a0f11d5a8849ae0a12f37554e3175caccaa07c943e1e8d2538f09e10a3fdaf008538f15fc9eab5dd391cf1e559d22c17346056e","ssdeep":"384:q5kE3ytQbLatP6FFMF4Nj90S9ltYqgtWtitcvmeEJQAlw171XUtVg9IFIA4eAw73:q5NbcPJ0lOqdEbqXWz4eAw7KZcFf7l1d","tlshash":"7c131941b087eaf9ddaf4055a11e0870d4373fd69422e182f77c99a0a7e8ca55b0e7bc","size":44092,"data":"","first_seen":"2026-02-03T19:10:00.078516Z","last_seen":"2026-02-03T19:10:00.078516Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/app-v1.5.5.prod.20251128_164.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.14.42","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e64225a20489a5be3c5e88100dd38e","sha1":"0a3284b39f08e6010240e0919bd969b481be66e8","sha256":"8156e064a7d0999960d1dd3f8a6c5c0dc97d0ea589a93642d8d679346eabecdb","sha512":"a228b02bfc2c2434fd215e4f63c6969ff9dc5db2c78bfc6c44efab63651798790b82154f55db7274c0652ac85ad1f1654cbd36ecbb1099b31d04407b621c8ed3","ssdeep":"12288:7Zw4XSrkavBcfHGFIteWlAltGkiK4Vs/lOZy:1/XSAFHGFIteL7riLVs/d","tlshash":"3f4528cd71c2b0a207e361b1403f100bb33a6d69680d9464f665d8e9bdb998e9237f7d","size":1209102,"data":"","first_seen":"2025-11-28T12:22:00.201964Z","last_seen":"2026-03-06T01:26:04.938245Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ntissuePaper: 1770145768\r\nsign: 3694E5E568B8440E2AE30E0A3260A2BD\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4310,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6675ff47045587220d08bdc576353c5b","sha1":"c5fff2ba8575357a28a376ad0899577f7f7a2c95","sha256":"45da916163a9d3c23c568d48a070ce5c03b9049f6070c015b1fef03d67456982","sha512":"71a423890ca517a0d8ae77748d073bddccdffbcf24a6db91c03cd1c85a19fbbf3e31be7f92ebafbae650ba935041000bdffcbc0883c4c027539ab5ac5e9b34ee","ssdeep":"48:Yds4JyqJvbDaD/wAu2JtZTqfwY+XHBJsY6T5K79RhHEEuo79tcqpkBS:h8hJvfYTfJtZmfxiHBJs78BL6ohtcquk","tlshash":"a991bd46b7658e6d90d58d879be16ffe312e321650c46f4677de8ee410803a3760fa12","first_seen":"2026-02-03T19:09:59.795266Z","last_seen":"2026-02-03T19:09:59.795266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/btc.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/btc.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:51:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697decbc-361b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13851,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"714da61b1f98e5a8f03c2aa447dd448a","sha1":"91a5b17d998297f84b58a31703fc383542251fda","sha256":"c232e41357fc1901b351195e39059e54aaacbf7d033e6f5804174ecfa11f9f37","sha512":"321f6f91dc92f6e4ad81d1e6a470d3b29471c244ea0f0e571a062a713b9b129ae1d096383bbecf54b22cb12a3cb668a1a4e06cb55b4a9a117a39d48ef62ded8e","ssdeep":"192:IS+7E4OlzNWah1FCAQ+G6cNsBvRvAzc4tn1jWEjycFkLOTUCFgRej4xPtO3Z1exQ:P+7E4Ol97Uz1NsBv1AT1jWl+gCh4jVTu","tlshash":"fe52c0f2a64a104c44248cd30199acf3a45eae7ba2e53d634a1b458621b7c4f7adc7d4","first_seen":"2023-10-21T18:09:31Z","last_seen":"2026-08-10T21:23:34.650115Z","times_seen":191,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/ltc.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/ltc.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:52:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697dece7-d9e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3486,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"30cd5a3761d7e942b07a6b90e75865d8","sha1":"85583a72c1b6dcd45fc2216248f9d4f76c137342","sha256":"09e169b75b278c665348dbadc1cec78458ad4e7c2aaea453e402b8a7b35e4567","sha512":"dc4bd152077eab4c716471f058327eeef03bb6f8785baf2acc5ddd4141d66d7b7e1e9e834d8e33080f472eeb515a7a9737ae0391ee8e98b63983529756bc794e","ssdeep":"","tlshash":"8e716dd9d98485d3594df5b18df624617723aca41d33bff1188043076aea814ab86ed2","first_seen":"2024-08-20T02:34:44.569435Z","last_seen":"2026-08-01T16:33:23.833236Z","times_seen":47,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/3933.61c88f3610f7ba43.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /js/3933.61c88f3610f7ba43.js HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-2b82\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11138,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11138), with no line terminators","md5":"a6f502c1967279ea9dcde16e992de8ea","sha1":"986cfab3d030f354a5bbdced9c52ed5699c111d5","sha256":"24be5cc05161f5c72faf5594ba55a0fe0a94e1ad61786f25208cc663bc82f7d1","sha512":"070652a1b4f426a96bb303021553a93a86a996676f1ca01dd2891b8e23ca32c1bbdc7edca257d980ea2d669a0d1b3d174d8d270dadcbcaaa0d14741c93617a14","ssdeep":"192:dbMLbXNTikaIxAAfi+uUjZUzZmP9TPouW9F8:doLR8Ixvq+uUVU1OwrF8","tlshash":"4b32730972c0302297dba056801f170661373689ba1a85dc7679ecf5ae697bcb02ff7d","first_seen":"2024-08-20T02:34:44.555971Z","last_seen":"2026-06-03T09:56:52.893121Z","times_seen":15,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/css/Home.c08071e1.css","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /css/Home.c08071e1.css HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Feb 2026 11:30:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5c-36e82\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":224898,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a09c0acd4a7a4f05d094acb76730153f","sha1":"b563a6069b1381ff2b74482007727e61e8a5857a","sha256":"2a4b8767a6548a78f4e970d9156c45dc7467d703746b6d0a343e730e56c2960f","sha512":"217827210362fb245d4e1739b497c995db434160aac3c127a3bdb5492a6813c755ef7c49c708720ec2891bdd1b3cbb215d2c3978ecb8f01b7d31f154e08cca83","ssdeep":"1536:yTHZwoNHO1hdtE5E22e5cDh+7SlZWyw1FV8p9ggG3J:yBHO1hdOl15cDh+7SlZWyw1gpa","tlshash":"7124cd6bb88c088ca2bbcc764130efa85a2c7396c7420ededc6bf6745d161d73562785","first_seen":"2026-02-03T19:09:59.818992Z","last_seen":"2026-02-03T19:09:59.818992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/img/c2c2.e68d8daa.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /img/c2c2.e68d8daa.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/css/Home.c08071e1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Feb 2026 11:30:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5c-ae72\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44658,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 56, 8-bit/color RGBA, non-interlaced","md5":"0b3c745de4bcd8cf7212344b0df12522","sha1":"41e926219eecd48927d24e41a3e36dc3c81d2214","sha256":"ff0424f8de13d3a53d53a1643e978d9ad5d26e2a3cc7af2eb51f4b4e229da4e4","sha512":"6c6b0145e52a8554010a54451a846be2477ecf2e8bcf8c8703d4ffe2cfa1bddc1f52d732af8de33b1ef84bfc208f3d822ce2b31b378dd7f9252622a48386b019","ssdeep":"768:P3KdKRWQAKxbDgmiwTSSLhBhCj0YNna0TsTERqI/T/1Tuy2VxJfS50cCCB/e+NUm:CcRRAIvgmFXhCj0YNUTO5j1TuTS50TC/","tlshash":"cc1302d1fc8259503827e7d3b11b686c3a284eca578b1dc8d87e732640ef9386931e69","first_seen":"2025-08-04T00:26:38.360655Z","last_seen":"2026-07-01T04:42:16.506185Z","times_seen":13,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=b85f8714b62b44d4feca812b2224ac73\u0026track_id=\u0026title=OKG\u0026referrer_url=\u0026url=https:%2F%2Fdapp.vetrn-vip1.com%2F%23%2Fhome\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:30.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/start?ent_id=b85f8714b62b44d4feca812b2224ac73\u0026track_id=\u0026title=OKG\u0026referrer_url=\u0026url=https:%2F%2Fdapp.vetrn-vip1.com%2F%23%2Fhome\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Is-Standalone: false\r\nX-Is-Meiqia-Domain: undefined\r\nOrigin: https://dapp.vetrn-vip1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dapp.vetrn-vip1.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 37\r\nreq-arrive-time: 1770145770785\r\nresp-start-time: 1770145770823\r\nx-envoy-upstream-service-time: 37\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Tue, 03 Feb 2026 19:09:30 GMT\r\nEO-LOG-UUID: 14244091798662519652\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4656,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"890bfabaf8d63d9c2fd75e074a68a276","sha1":"e6664eb9cc34f1743908db0f6df720b783a0e385","sha256":"16264bf72d22ed297e5b55328b0be58c1ed5b50c3ff890c6a6f6e63ea21ec9b4","sha512":"2b42dc850b6c4105e544bdc02b5d32cb92deab53cc286ce584ea9eeef1e6c9106dc7b05bee05d26c4a1ca18ba0292e6709560e76c26e8cc2f7862278cf9a0203","ssdeep":"96:1SvSB07GcaxQBoahR2BUMqnx49OLqdeybgbBbqlrsjoF7wOeCbq:1SvSB0CcaxIhR2Zqx49kqdLbgbBbqlr4","tlshash":"35a1856aa02dcf794ee44781a69a31259aec24d2f4cc1f91c79cdf282acb4cd730d51e","first_seen":"2026-02-03T19:09:59.841958Z","last_seen":"2026-02-03T19:09:59.841958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:37.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ntissuePaper: 1770145777\r\nsign: 734BF3C749A3FC8B8A2CD2116EE4D303\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nCookie: MEIQIA_TRACK_ID=39AjSjd6jiHODUgiVifiESAzoae; MEIQIA_VISIT_ID=39AjSfYwU9dpAQ6N2hPjYwL0HrO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:37 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4312,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"04d257a7aae796f81c6a6cc4ac40d4ae","sha1":"b25ec78d50248ccab39d2b92fa10e7f9518d7b19","sha256":"6d61ffa010bc4a512d61e75814c9494ec1d9a2ca23cd7e9dba680b45de737d63","sha512":"99956f2891fa41bbe518ad674dc16869f5fdf512c45278ff351a0bbc7bb37667fd9d07e715a3d5b1b8cfeb2cf4c923ef3f7d836bad6fe51035a01932411756a8","ssdeep":"96:hiOvluU6k/KaJezTf97CJCOJB/Bwvno7La+yb:puxkV4o+w8","tlshash":"73917b46b3568ead90d14d83aad2affd352e331254c86f4b77ce8ee42191363750fa06","first_seen":"2026-02-03T19:09:59.845181Z","last_seen":"2026-02-03T19:09:59.845181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/img/App.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:27.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /img/App.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Feb 2026 11:30:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc60-c92\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"fd49d5d33a4765689dd3be19b8c5958a","sha1":"50ba6f944295ab0edad0a9d19854ab89149d55e4","sha256":"8710443881a5a923882cff087dde324f7bdb91232f888717ae5511724083f9c9","sha512":"dcf389ecf934295c2a69f9cdfdead6a8df406bc96a5ffe0820c41abff81052da9ace05df16f8c55a371b327157c4ef65bf4d0577fe5a9a94a2e2652bc5f9d57f","ssdeep":"","tlshash":"20619381dd554ce1c19930b566af4332232b2d07d1b9ad86c0cbf9a51b1e7e8fc51389","first_seen":"2026-02-03T19:09:59.84979Z","last_seen":"2026-02-03T19:26:12.308355Z","times_seen":2,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/ada.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/ada.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:51:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697decae-1a9e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"020335b53f42d8c2db2ce457d42cf92c","sha1":"eaa2ede70680bd3b52e11d94db6ef00709116591","sha256":"9c13e4f98e57ca493e31831d21f70a053a11a2bd76ae883501da05b90908d285","sha512":"dc9339c726bd1e7d7e029e42e380f5536ccf36f0ef244843d40d734c9ec223ef753ef737db41a0fea92cb5b8f132fc5e8dcc9ab716b2abae3a56378507bbe1e8","ssdeep":"192:ISDwfoPovZuQKkNgU1QtPP3qi4yYEDSmyb0oWMW5/D:PkfoABZCttnR4MbB/JD","tlshash":"c9e1af516787d5bd8b9ff04f4cc7e20267c3973a896057e8127c23846955de208626eb","first_seen":"2024-02-25T15:52:58Z","last_seen":"2026-08-04T22:22:17.253814Z","times_seen":135,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/knc.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/knc.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:52:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697dece1-cdc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"51714aa29d19e5da78cdee5efee59a80","sha1":"481e02472307230b4e237b79778893e9ee9cb4d7","sha256":"dd913aca52df457571e68b043241d327ca91def56971c66f2d73cb5350c1007f","sha512":"d3ebfc073be62dc54c159cdc3648db4ff0562162758350ae3a91ae74ffc5b5c5b609aca54380defefc6882255d0822990883b9d5e482d451cbda5eacfc69fae6","ssdeep":"","tlshash":"2d616d981fa65fb6d8942cc3a53117f84d27b64e0a4f0d33ad32100f58fe44594daf62","first_seen":"2024-04-26T13:41:42Z","last_seen":"2026-08-04T22:22:17.312225Z","times_seen":84,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/doge.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/doge.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:51:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697decc9-bfbd\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49085,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b5452a4279aa36e989752b51865ca4e0","sha1":"e0866ad27f7d94ea292296bd895851990e1acd79","sha256":"7559dd132cf5b5eee101d21f33ee6cc8a561b3c367e14de565b1f06a03c6b558","sha512":"199a93c5370b5cc13ccf8fce81c970a2fc9286ff6176a7313244bbd38d1d61c44d74e66da352187524fb57def51805880502e725ca30feef7fcf7a1856362b8f","ssdeep":"768:XMIaqnaCct0xJTF9PIeHBxxf0V88hSGeFFnscAloa8cb5GIeWcXyrj:haqnNct0/TIehfehS5DrAWa8aYlWcXyH","tlshash":"fe2302cb9c00ac4fcf19b36a4466d464c64c8c67a9990d3054dad4fabf6efb01616603","first_seen":"2024-04-26T13:41:40Z","last_seen":"2026-08-10T21:23:34.633963Z","times_seen":90,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:35.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ntissuePaper: 1770145775\r\nsign: 55C11991AB8BFE7C7D7990732FAC4114\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nCookie: MEIQIA_TRACK_ID=39AjSjd6jiHODUgiVifiESAzoae; MEIQIA_VISIT_ID=39AjSfYwU9dpAQ6N2hPjYwL0HrO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:35 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4312,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"04d257a7aae796f81c6a6cc4ac40d4ae","sha1":"b25ec78d50248ccab39d2b92fa10e7f9518d7b19","sha256":"6d61ffa010bc4a512d61e75814c9494ec1d9a2ca23cd7e9dba680b45de737d63","sha512":"99956f2891fa41bbe518ad674dc16869f5fdf512c45278ff351a0bbc7bb37667fd9d07e715a3d5b1b8cfeb2cf4c923ef3f7d836bad6fe51035a01932411756a8","ssdeep":"96:hiOvluU6k/KaJezTf97CJCOJB/Bwvno7La+yb:puxkV4o+w8","tlshash":"73917b46b3568ead90d14d83aad2affd352e331254c86f4b77ce8ee42191363750fa06","first_seen":"2026-02-03T19:09:59.845181Z","last_seen":"2026-02-03T19:09:59.845181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/4959.c4fe8b3490372623.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /js/4959.c4fe8b3490372623.js HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-9204\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37040), with no line terminators","md5":"c565ec0e218b7b0d29b683e453c23f63","sha1":"df587fe1358957fc20b60dfc78fff359788d592f","sha256":"1bd7679a02e04b05140f0de52c59895a94c3df7f49665f97ed7b1168d5c8ce6d","sha512":"1943ce150dbfaa53bc65eb3ddb6a2d18352b6e865ebb2ba002a50b62757659480322cd654f4b2beffd40dbd6db1e01782cf67ed28fc99272100a045ba65a639e","ssdeep":"768:U0AaQv9T2Ul5yTQvWlaYYw8Ffc4rLy5WSM:UHvy1laXw8/PygSM","tlshash":"c1f26c663083f47ddaafc026213a1120683a3feaa465c489f7b8d9996fc4d641f0d77d","first_seen":"2026-01-14T15:30:02.387382Z","last_seen":"2026-03-12T14:13:04.95471Z","times_seen":8,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/css/4959.39a09d0f.css","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /css/4959.39a09d0f.css HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-509c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20636,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20636), with no line terminators","md5":"ced514ed5beff9babb13b0ee90607a4c","sha1":"35c9627dab9ff63c597755d24c9dbfa22180255a","sha256":"85b0533d5f28f9efac3527e3663a8ba94cabfcb2d803c8fe1b97f7267eeb3ad7","sha512":"188ac31d3c335e385417ebe7c48a08c846dc3216439bbdecb13c902d746bde468b6e0bbd8d29a83fb9de6d494b9388259a14aff585b8accd98147285f97b7674","ssdeep":"384:LfwNCcqH1TES7geEAK6MmiU0fAEC+CfhyYMLT0PM1bv8nq5MeUKwCMLPsLVu6TE2:LfW9","tlshash":"e9929c22b48c190c2637ed398ba1d774972d7392d2050e9eee6bb2b41f131d7b12b746","first_seen":"2025-08-04T00:26:38.484516Z","last_seen":"2026-03-12T14:13:04.891946Z","times_seen":10,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/item!list.action","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/item!list.action HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ntissuePaper: 1770145768\r\nsign: 3694E5E568B8440E2AE30E0A3260A2BD\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1180,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dea8a29f69907b8f390b22478bd356c9","sha1":"6aa3feeb073572b69c88496323fa4a987a10f99c","sha256":"1b866838a0d9a7bf7b81b724504f65ebc7a8f98ac140490fa3ed8c7762dfda98","sha512":"f407d65cb9d8718f04fb0ef451fb00c1e4ea24e41d9a0f67b1e4f5919618fb24a275bf2f8d4f5bdd5d527175f523f0d1f8d778d81b017fdf6f86ff88dd977355","ssdeep":"","tlshash":"8721a92a67255e2f9a97dbc314fe5f6f21082449c985d38db9aa5e1d0bd0ec9133b320","first_seen":"2025-08-04T00:26:37.98311Z","last_seen":"2026-02-03T19:26:12.214318Z","times_seen":4,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/eth.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/eth.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:51:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697deccf-1506\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5382,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"33c437152772a3062d5b72165586e3ff","sha1":"e7720dc6c707bcf08013b69d035fb3432b8cffa3","sha256":"cfa115e35a4311b4c2e464f998dbe14b253f29db59e3b2635d9d5249ba65d649","sha512":"f10d1a732ab442db5bba8336519d4b17674995f706fc3289cf24bf9d6cca5cc4256e8ca7d094d26293164d59477ce11136e86cf7b7d0ab83b92055848b5e192e","ssdeep":"96:ISTxS8J+VZGxqxbYBlogeBHvNf2qYIcX8Z8plEpBSLd5eg2Am:ISTxl+Tlxbk+JVJYVMbj65ext","tlshash":"b5b19dd5a2feb7fc1c35b992fac214e230714ab31074cfa925808611b87d0bc0a8b778","first_seen":"2024-01-27T10:59:08Z","last_seen":"2026-08-04T22:22:17.255648Z","times_seen":141,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/get_base_config?ent_id=b85f8714b62b44d4feca812b2224ac73","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:29.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/get_base_config?ent_id=b85f8714b62b44d4feca812b2224ac73 HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dapp.vetrn-vip1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dapp.vetrn-vip1.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 7\r\nreq-arrive-time: 1770145770242\r\nresp-start-time: 1770145770250\r\nx-envoy-upstream-service-time: 6\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 1034\r\nConnection: keep-alive\r\nDate: Tue, 03 Feb 2026 19:09:30 GMT\r\nEO-LOG-UUID: 4277416331133130086\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1034,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f2c305a48c9f5aa8a12de937896a86f0","sha1":"6fce086511af36deb20efefceebe40e4ecc66ea9","sha256":"424b8fc44eaad471796a45b75fa3eb1530b035aa9e3c3a47a45301b37812913b","sha512":"47a566c1141b4728b768804c7b06e142f99c1af7701bc754816ca13a2adb766fd8356d1d72a918be25fd6ce73e02f8046032d19e082da7d0808faae775a219d9","ssdeep":"","tlshash":"1d11ce84608a8e35878577887ddab416c96c38a3fcc42f11d764df6836db1dd3206558","first_seen":"2023-11-02T10:53:25Z","last_seen":"2026-06-06T23:13:04.289858Z","times_seen":1550,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":159,"dns":114,"connect":19,"send":0,"wait":263,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:42.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ntissuePaper: 1770145782\r\nsign: 3B68BA1258B1B5B9440A3195471D33E9\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nCookie: MEIQIA_TRACK_ID=39AjSjd6jiHODUgiVifiESAzoae; MEIQIA_VISIT_ID=39AjSfYwU9dpAQ6N2hPjYwL0HrO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:42 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4311,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7750fc3dd70442881291a0a29c5e2732","sha1":"03efb8830baa74fd08e8520be6e8c4eda511e6e8","sha256":"fa6be422a3311fa54f40d878ac013d730e19cf80d0b76720f0e2c5f1597fd889","sha512":"4081086070af8ca668cbbc07999fbddc7d3b89bd5f1a46268ca8c8939350b059caece89948bd8d0a5091002c625893f12c7396159a50a0f4b133be4fdec7ca57","ssdeep":"96:hQtQvluJ6keu/J5+2fc7HJ8lYC/7No5Lj+9c:LuEkLvTkV","tlshash":"8c917b46b7528fad90d14d87a9d27ff9222e7212c4c55f8677cf8ee421913a3750f602","first_seen":"2026-02-03T19:09:59.870539Z","last_seen":"2026-02-03T19:09:59.870539Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T19:09:23.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:23 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 03 Feb 2026 11:30:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc60-5a7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1447,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1035), with CRLF line terminators","md5":"3ccf981dd26214bbd4d4bf97f7496124","sha1":"388da33578e634262e90f4ea6ec63803feb43ff4","sha256":"86438570d2af219b947a3c339c82cf8b26c216eeb9234192c26c87eaf08e2e0d","sha512":"2efe2e8abe6497a3733588065cc2811ee20c134bfb2d9a47fd09703c601f2f3eb7d3d263408f40076e3feb8dfdbddc8a61badbef9412290d1c4ab27b7a4f25b0","ssdeep":"","tlshash":"003163878c10849c137056aafe7af11de885690ec510dc91b9ec91ae1fb0fe84d93d19","first_seen":"2026-02-03T19:09:59.879024Z","last_seen":"2026-02-03T19:09:59.879024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1565,"timings":{"blocked":635,"dns":48,"connect":289,"send":0,"wait":290,"receive":0,"ssl":298},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/entrypoint-v1.5.5.prod.20251128_164.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.14.42","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:27.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.5.prod.20251128_164/entrypoint-v1.5.5.prod.20251128_164.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 28 Nov 2025 06:40:28 GMT\r\ncontent-encoding: gzip\r\netag: \"B1745AAC366A0FD580FDAA1F5DE861AE\"\r\ndate: Mon, 19 Jan 2026 08:01:32 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 696DE4DC8901C13233D65EE5\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15216682669980824568\r\nx-oss-storage-class: Standard\r\ncontent-md5: sXRarDZqD9WA/aofXehhrg==\r\nx-oss-server-time: 12\r\ncontent-length: 64763\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 13180006039926407689\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":194416,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65407), with no line terminators","md5":"b1745aac366a0fd580fdaa1f5de861ae","sha1":"b9fa4bcdc30e775656a0485cbeea7ff6bd4eeabe","sha256":"20b7430e9ed5da2ea82f9fb50aafce7476e531219989ccbddbdf66749a4328b0","sha512":"3150e2a3e9bad6218010c55f184401815ae85f470fe88c821e14b3f9c4b8327f048dc1c4e28e2d52fbb4cc8481927ecb724e0282fee96fb29c8a9cf66e43d5d4","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbM3Zh:+llOuU1C+Pjv+1o+9YW","tlshash":"c91408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","first_seen":"2025-11-28T12:22:00.181302Z","last_seen":"2026-03-06T01:26:04.909446Z","times_seen":540,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/app-v1.5.5.prod.20251128_164.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.14.42","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.5.prod.20251128_164/app-v1.5.5.prod.20251128_164.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 28 Nov 2025 06:40:28 GMT\r\ncontent-encoding: gzip\r\netag: \"C4E64225A20489A5BE3C5E88100DD38E\"\r\ndate: Thu, 25 Dec 2025 09:02:34 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 694CFDAAF9E1D53634D1AFC0\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16588518196627940506\r\nx-oss-storage-class: Standard\r\ncontent-md5: xOZCJaIEiaW+PF6IEA3Tjg==\r\nx-oss-server-time: 8\r\ncontent-length: 356967\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 14138487778505250802\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1209102,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fa1553d00d7d395fc8941c8175cfae45","sha1":"18602d8edacd3597ca66776fd04554065fd476de","sha256":"500791a0013dc9e037d19876a79ced62ee3a781aa04ce739937b316b2a562473","sha512":"2f5ff614edba745a9c45905ed04d6c2ed743205ce526836045b200fbf8b1a4d29c310224d352c7312173c4b0061263deb7b25afb3961272ca5f6a3f3ca088e65","ssdeep":"6144:3LPRS/lbPjWS96XStzJkazaeBXMbbHnGFIteZclTUYoFyFbe9Gk1Y2FAUSniW/Nq:7Zw4XSrkavBcfHGFIteWlAltGkiK","tlshash":"f92539cd70c2b0a207e361b5403f100bb33a6d69680d5454f665d8dabdba98ea237f7d","first_seen":"2025-11-28T12:22:00.19741Z","last_seen":"2026-03-06T01:26:04.889466Z","times_seen":536,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":839,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/5181.acc5b97fefcfc7cb.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /js/5181.acc5b97fefcfc7cb.js HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:30:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc60-679e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26526,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26526), with no line terminators","md5":"3b88014927e959a9b08dd135f3fd6815","sha1":"cef208f06852ec71352271b6152027c63a3c6547","sha256":"b1eb48143fe47c645c08a585137c3e86ac2304efdba8efa0ec6635add0071b0e","sha512":"c34e8f9636b90dc1d9ac89bad9dad701adad899baa95d158a7379fa2db32bdf465be24635028639c8b7581f602aeb9ba7e9c3f130ddf11e0512821616fca9911","ssdeep":"384:IJveNZbezeBO3G3ecDyZd0MYQwy67r1rm+Q7IR4eTInEfU46n7WT60h:o86eBO3STDyZd/YQwyMvR47nEfYQ6E","tlshash":"37c2c06da2a9e5ee37dfe2fc750fc46dcc37ace9f00c92069a74e5886de5a450036510","first_seen":"2026-01-14T15:30:02.515035Z","last_seen":"2026-03-12T14:13:05.043623Z","times_seen":7,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/syspara!getSyspara.action?code=perpetual_contracts","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:27.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=perpetual_contracts HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ntissuePaper: 1770145767\r\nsign: 8CF7C01E07BD0AC7B699E65C16567FC8\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dfb2ef3776de29919138c4d290154656","sha1":"1baa6810cedd74007407898704d9f12c529b1aad","sha256":"3cf1cb39a8585c2f10d6f6a76d7423c22777c2a972be2400b78b9b64b39cee59","sha512":"7859e386f790a6f9c507a65bd171f660fe370dd828529be4ecdde3756d9bc72810a9fda418ddb37d0b1460392901a4710b07347a409b5c1b449918293331d451","ssdeep":"","tlshash":"4ea00201249b9a9e88579156764ca511c1ac52d3588497510e8da62240de5a5110186a","first_seen":"2025-11-08T08:17:24.829025Z","last_seen":"2026-02-17T15:58:05.924984Z","times_seen":3,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/banner!list.action?model=top\u0026language=en","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/banner!list.action?model=top\u0026language=en HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nsign: 3694E5E568B8440E2AE30E0A3260A2BD\r\ntissuePaper: 1770145768\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111570,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"98a1612e0709ba12386a97950458ef55","sha1":"c58488360ed3ed1e660e60e6b42dfac22a9dd359","sha256":"2a0a187170ce0ca687f12bbcef04aff22633c447d2b6ced70df4b51a8d021ea4","sha512":"83e67bd6334d8a62193d983a33d30ac14b516e1096a067ea1bfff7cfb6180a99e1abc9bdf4f4f7bfa5618ef6686ce8132bd0aacc966f3a3e1bfc03381012f66e","ssdeep":"3072:qKr6WdODLdIwcPO/NhE22KSJCUqyumvmn:qOiLdIDOFhE2wJymvmn","tlshash":"8fb3e014ebb6ed29080199eb152236c1e4bcfbf185ec90ff308568e7f4b1db4d129666","first_seen":"2025-10-31T04:59:47.913379Z","last_seen":"2026-05-27T16:33:56.559136Z","times_seen":5,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/banner!list.action?model=top\u0026language=en","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/banner!list.action?model=top\u0026language=en HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nsign: 3694E5E568B8440E2AE30E0A3260A2BD\r\ntissuePaper: 1770145768\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111570,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"98a1612e0709ba12386a97950458ef55","sha1":"c58488360ed3ed1e660e60e6b42dfac22a9dd359","sha256":"2a0a187170ce0ca687f12bbcef04aff22633c447d2b6ced70df4b51a8d021ea4","sha512":"83e67bd6334d8a62193d983a33d30ac14b516e1096a067ea1bfff7cfb6180a99e1abc9bdf4f4f7bfa5618ef6686ce8132bd0aacc966f3a3e1bfc03381012f66e","ssdeep":"3072:qKr6WdODLdIwcPO/NhE22KSJCUqyumvmn:qOiLdIDOFhE2wJymvmn","tlshash":"8fb3e014ebb6ed29080199eb152236c1e4bcfbf185ec90ff308568e7f4b1db4d129666","first_seen":"2025-10-31T04:59:47.913379Z","last_seen":"2026-05-27T16:33:56.559136Z","times_seen":5,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/etc.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/etc.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:51:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697decce-1668\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5736,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"77a0e80ab74016ce803a10435986145e","sha1":"7a022e22b427e5c24eeb95979b8ca0fa9d344944","sha256":"a79ce24c631cedca4d1d1e982a7c980483b707de5a8b76b81f4bc15408f15a3b","sha512":"0fff788210e3a801e8053598c7663559473bc776ae3775a3876266e5c5fe12d2929f6264ceada09ae3a6cf2acd70749399da957e47d04639ce69406c0953945b","ssdeep":"96:ISdk2MnPUV9tr1ctKRhbTdbV6fAUhdafe6rJVlPoUrTMx6nhZN/Xgov6WZbEI7j9:ISdhOcV9tYKRhbBVyULrJVlwUHMx6nhj","tlshash":"0fc18f9ef381542594ad3f6e304e943e819689bfa7778590a32d819dd096f31a8f2039","first_seen":"2024-08-20T02:34:44.560796Z","last_seen":"2026-08-01T16:33:23.887633Z","times_seen":56,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/xrp.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/xrp.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:52:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ded10-15a6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5542,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"2acced3d18e703091d4f37c859841a60","sha1":"1f86c2f1a6cc66c65c829b0b5f003cac4544387e","sha256":"a2dd13668a707c270259b31fe39b13606cf5ef2594d986176ca796ecd0ac6d46","sha512":"c1f73b7025b0a9edd0e214e4e972b819e57365b955d26638ff1db030ee96b187de1df29aef2181cbe42f23dcc6f896f293e115fa6fa34430ae7e6784d6208a51","ssdeep":"96:ISR/a/a5iLqq4aEE36SWjlJkui7pX2JmPTGYXJdprFzJJDqvY:ISR/a/aIL393QjlJi287dprJqA","tlshash":"c6b18ed86b3d8caa051ea4db6446e263dc1e15ec00d8d8d5db2c291a7191bcb309bf98","first_seen":"2024-08-20T02:34:44.568187Z","last_seen":"2026-08-01T16:33:23.897658Z","times_seen":48,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/usdc.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/usdc.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:52:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ded04-8a6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2214,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 72x72, components 3","md5":"efec2e674dd462227a3a1c41b60ff703","sha1":"418c6d0c647657164157e2d8adadad8467876e22","sha256":"2e2654d86a6ef29a2ad3bc775e01cc0b5737288d72f9f327622a775bd4be053b","sha512":"8e1475ae373f73d688199651f9bb202ca8d27bd82b2a86142c91242485b6414ea82d96a87c614683033a2826257e7f41ab30e377fe4839e3e6ff43d4615f07ce","ssdeep":"","tlshash":"00410903b638b903df2056bd50346d2ab274ce8482b5cfb56542adec6937cf882c5095","first_seen":"2024-12-28T08:07:22.73041Z","last_seen":"2026-08-04T22:22:17.333196Z","times_seen":58,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/app.94a4d8c47c884aba.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:24.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /js/app.94a4d8c47c884aba.js HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:30:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5c-1d3a57\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1915479,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51653), with no line terminators","md5":"2633b5c4be21d8fe2fcac0732651bc5a","sha1":"95c2fb8b3001c4e550442bb7e87b57977588cd9f","sha256":"fd6483c38ae9c602e72f75adbe799777937da4c20351cbdde6001716a781cef1","sha512":"917b9d8436993e9c83651445cbcae71776e334b9993cb0922b7756d60d565607d42d0e08b97add46150b2ff9521de2a3491b3a9e7bb728b9eb18abcf85f0eae8","ssdeep":"24576:EiUaAKoPKNCwZ9Kwptedv05o/gVczrY8WzJ7XiwVXWW0:EiUaEPKl9LtG0G/iczre97XjmW0","tlshash":"6b85291a92c3c3b45ac231d12d4633e52375ca86e78bbcef0779d49432feb959095ca2","first_seen":"2026-02-03T19:09:59.915757Z","last_seen":"2026-02-03T19:09:59.915757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/dai.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/dai.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:51:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697decc5-15ff\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"664f0782d9723352ebdd55199998ff43","sha1":"91abe6743d72b5a0c2f1fa27ddb21c38f011cab8","sha256":"9795e4eba0822f4141998a43290e157a5c341f0bd8a70dd6d114747abdde347c","sha512":"8fbf59c96c38bc7794f0af628506e98584df8b4087044098aa298e1cce478bfcad16afcbb4553038e9214fff0e6c5bfd2f66e6966caaa3bd0064df853d75ede8","ssdeep":"96:DAJFcjaz0I3N5/AcpxAKZo/zOUNptBbzKVbFNkWT3dtN3yw+BhoBZ8snoKghL:DAJdzpxf0z5PbgbHkWL5yw+rC8sQd","tlshash":"06c19d5325c0b9c4126ac170939a9f5232345def242df709b46d74a19fb29a4f08e7f5","first_seen":"2024-07-25T19:27:13Z","last_seen":"2026-07-11T08:46:18.279Z","times_seen":71,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/lang/en.json","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.14.42","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:31.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.5.prod.20251128_164/lang/en.json HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dapp.vetrn-vip1.com/\r\nOrigin: https://dapp.vetrn-vip1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 28 Nov 2025 06:40:28 GMT\r\ncontent-encoding: gzip\r\ndate: Thu, 25 Dec 2025 09:02:38 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-oss-request-id: 694CFDAE6B4FE73533F55F0F\r\naccess-control-allow-methods: POST, GET, PUT, DELETE, HEAD\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 60\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4451875482026880066\r\nx-oss-storage-class: Standard\r\ncontent-md5: PwllhHh/9iZQ3kTiZQ+HHg==\r\nx-oss-server-time: 30\r\ncontent-length: 5048\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 12806803385290716904\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12137,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3f096584787ff62650de44e2650f871e","sha1":"ea91ca7d94244165cd0021d6eaaab79ff5c755ca","sha256":"7c32a52c7d73dcd8624a7af844564280f6e9ad1c77cab79062ccf819ef34839f","sha512":"dc298505b16c37d5ad1df6b7df187af7183709fe5ad635cf14d679c6077dde591184ba5c3e8a9fd6b02ffa0712a21373feaeda04cbea718a3a64e61132c9c697","ssdeep":"192:5lX/WSWyNsLZMYK92gjpSzUHmbujCJBSBnwI2f4Y7Enm0tEQAbPxDD:5F3tGvg2gJHmzSqIe0tExl","tlshash":"4442d51dc7151da71043031bb84fa026a660915b9fa4767ef3a0416d1fae68f62bb3ce","first_seen":"2025-11-30T13:22:40.844646Z","last_seen":"2026-06-06T03:06:59.650197Z","times_seen":199,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"camorope-client-a.meiqia.com/push/568/sryifew5/websocket?browser_id=705e879b1051139380b4a1f678a03c86\u0026ent_id=525156\u0026track_id=39AjSjd6jiHODUgiVifiESAzoae\u0026visit_id=39AjSfYwU9dpAQ6N2hPjYwL0HrO","fqdn":"camorope-client-a.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:31.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /push/568/sryifew5/websocket?browser_id=705e879b1051139380b4a1f678a03c86\u0026ent_id=525156\u0026track_id=39AjSjd6jiHODUgiVifiESAzoae\u0026visit_id=39AjSfYwU9dpAQ6N2hPjYwL0HrO HTTP/1.1\r\nHost: camorope-client-a.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dapp.vetrn-vip1.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: xydcKziFnfx3/Vq51IgF/A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nconnection: Upgrade\r\nsec-websocket-accept: sKxZ8cd04Mgiv/fs8dVOdmjwFko=\r\nserver: istio-envoy\r\nupgrade: websocket\r\naccess-control-allow-origin: https://dapp.vetrn-vip1.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: *\r\nDate: Tue, 03 Feb 2026 19:09:32 GMT\r\nEO-LOG-UUID: 16770026375436271932\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T00:54:02.896645Z","times_seen":17863441,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":0,"dns":1,"connect":19,"send":0,"wait":356,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap//api/exchangerateuserconfig!get.action","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap//api/exchangerateuserconfig!get.action HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nsign: B4847EAD358D85ECA358AFF5B118D337\r\ntissuePaper: 1770145766\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3d83ec9543a42ff3b631e8f1084c861c","sha1":"a758c947caa3f0227cb217288961dce6355d817a","sha256":"ddae7b7fe4c54423ec89e48bed607e0922c3675eda680e3cf5cd2a470886e0b7","sha512":"009afab8387c0d1e42ee7c21834bff8646a30399e68981b384f4c8755acc13a8ed4235ce0e07167593bb26e9ff7219b8f71cc08dfed911a7c767e814002a3eaa","ssdeep":"","tlshash":"31b01201202e4d6dc013a08ff488591c6d29175310c59a600adc4d14d2cb0d2c448d39","first_seen":"2023-12-02T14:56:28Z","last_seen":"2026-08-09T23:06:32.388203Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/favicon.ico","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:27.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:27 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Tue, 03 Feb 2026 11:30:40 GMT\r\netag: \"6981dc60-10be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"9c6adbb7e9ecb099e519c54ff4e920fd","sha1":"a5b6af07be8cb3371882adfc302042421f2f07e0","sha256":"dcbdf601f6a353cae84e81a3090111cc5d3685410b4068a7697da6cc743f113c","sha512":"66c3882a9b87eac5173056068082ec0f5e7f6ed33528b50951e324cd77c11427539ffa061c5feea20057fe5aefe66f9ff63c3b4d981c78cdd442f8b772922072","ssdeep":"48:yHWWvGfUg/2+//i3slia/P2+/UgfWvXH:yHWWGfn/v3i3sliaHv/nfWXH","tlshash":"9e91afa56f026d18e53215f58070d7bd03862f912856e31222f6fe63fcf21429c96db2","first_seen":"2026-02-03T19:09:59.938708Z","last_seen":"2026-02-03T19:09:59.938708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/wdc.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/wdc.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:52:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ded09-217c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8572,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"516de279c9618ca1769694025e43d291","sha1":"7d68b4a33c0cd71da7d7371d1327d2ca782ec700","sha256":"8db51f8ca5ed18482be7106c4f44e8871e9af0624817439352c8db0d4ad164fc","sha512":"829ebe6bee8a6a3ad208773dfa3fbc679bf2097c6fbb1b996e1a978d7a32452ded3b596610917439d042dea92ad6f37b3d97234e68bd570f61f757d952fe90bf","ssdeep":"192:h+oz0QgDrysUEilzJMbLCOzMBW1FejmXN72NQobzgA0u:Q9QWZJcKkW1FH9T4","tlshash":"4a02af0e148adc5ff26b4879612793a304d4fa4b308c76de04367570a74e25fa893a5a","first_seen":"2026-02-03T19:09:59.945307Z","last_seen":"2026-02-03T19:26:12.270194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/vet.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/vet.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:52:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ded07-384e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14414,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"15fb803c7bdd1de2bf7be1beaa750fa2","sha1":"2856b7b816ff0e563eacd46acf3c9e7a72e2f0dc","sha256":"f7081abfa024063fb8d1e091a3a6cb181714025abcc087ec2394552ebd9ac792","sha512":"3bb6510b5f7dfc5f1e555921c21e06ac498037da6ad3162869a55f970469edc0bfdb1a86f7ee82327fe5367ac330b1eb5e04ae8ae4e942724c596e4967721897","ssdeep":"384:150wSgVLGQoqBeAbARHYVLt6N8wjfR6qmP4VpeX0b:XRWPYNtEjfR6qmPKb","tlshash":"7052c0e61cf4782e44990ebd6a5aa94c5167cf82c38dde11453d57cfca31c92e431983","first_seen":"2024-07-25T19:27:13Z","last_seen":"2026-08-04T22:22:17.254723Z","times_seen":82,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=b85f8714b62b44d4feca812b2224ac73\u0026track_id=\u0026title=OKG\u0026referrer_url=\u0026url=https:%2F%2Fdapp.vetrn-vip1.com%2F%23%2Fhome\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:30.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /hikari/visit/visit/start?ent_id=b85f8714b62b44d4feca812b2224ac73\u0026track_id=\u0026title=OKG\u0026referrer_url=\u0026url=https:%2F%2Fdapp.vetrn-vip1.com%2F%23%2Fhome\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-is-meiqia-domain,x-is-standalone\r\nReferer: https://dapp.vetrn-vip1.com/\r\nOrigin: https://dapp.vetrn-vip1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://dapp.vetrn-vip1.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: x-is-meiqia-domain,x-is-standalone\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Tue, 03 Feb 2026 19:09:30 GMT\r\nEO-LOG-UUID: 2491260135804100182\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T00:54:02.896645Z","times_seen":17863441,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/5243.7084f2ab8dff968c.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /js/5243.7084f2ab8dff968c.js HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-8fbf\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36799,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35944), with no line terminators","md5":"add4094b01c74ae82100089e3c0cd6a1","sha1":"8f49d4262e76e9d1a3e6800415173788d00bef05","sha256":"2cf5089dc41c08e89fbc8661073faccb37b1960ec81de7768530ab4cbc72fb24","sha512":"ea3c77dac6f1f81b165419c6e7f60b64b26c4273412367562089d3f710a9e2e7c6cf609ff2716a1945c9d6a65342c0f93b8dd2738c82bc30d9932c90e8ec666b","ssdeep":"768:rzZ6Y79UoFMhDQsbMGueYWbv7nMDwSbWZYlZ9lLLytWODGDzNatsOE9tFpgY0us0:rcEQCs0Z9t2Xi0uv","tlshash":"7af23195eb08e89c2c31d01a2c9a61d45a6d7f62a48d415a3cbdff5e39e0f78020df39","first_seen":"2026-01-14T15:30:02.395556Z","last_seen":"2026-03-12T14:13:04.963652Z","times_seen":8,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/syspara!getSyspara.action?code=customer_service_url","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ntissuePaper: 1770145766\r\nsign: B4847EAD358D85ECA358AFF5B118D337\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"87f201052e0dc6c3b8a4a53b83bf44b5","sha1":"f6b152fa79c655449e9e938e4417a5676a2e06da","sha256":"fb522b0841e80aac3e1cb4fe0f613ae4bfd87fcbe1c03d0137e5c10fbdb86cf4","sha512":"8f854611a22d0fe5ab058bb7ae25c79e995dcc20396f0e64e68aea6662f71cd4144e3378ca1d648d4e3785d96bdb9522864359c14da34c69bbcbceb0bd412777","ssdeep":"","tlshash":"8aa00200146d582b0ca364896c6d39548a5e615348d09f246f99a66440de56d1004429","first_seen":"2023-12-01T19:12:11Z","last_seen":"2026-08-12T05:09:18.379144Z","times_seen":6223,"resource_available":false,"data":null}},"time_used":1110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/news!list_v2_popup.action?token=\u0026language=en","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/news!list_v2_popup.action?token=\u0026language=en HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nsign: 3694E5E568B8440E2AE30E0A3260A2BD\r\ntissuePaper: 1770145768\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e3757d1e5c9a2c2de18c5ec1454f8f56","sha1":"c42cf57550ddd57c764ba787948b96a705e5bbf6","sha256":"96b779914dd172ea50a83b9cb999f689ffa62f3c87ff172ba58c81997afe235f","sha512":"fe538e78a87ba1c32995d17f1bbf24fb26cafb354fffad7226a009cfccd95e38aef66c3a7395a64c04ddd1f9aeef337644347801bcef7de18818452a1f09c015","ssdeep":"","tlshash":"b0800000280e3c0b0803208ce88cba8000ac22a308e0cb300e8cab3082ae2b22800830","first_seen":"2025-05-31T16:35:33.087883Z","last_seen":"2026-07-29T06:15:23.009022Z","times_seen":37,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/4972.e77dcd8cf8ee100e.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /js/4972.e77dcd8cf8ee100e.js HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-2ef8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12006), with no line terminators","md5":"b3fa68b4628207a8e8532585287c6152","sha1":"95c1151298b72a9d7c5f9daf15cb51afb57c90a9","sha256":"6ba8d8fbcb0cb02dd91be2858be02fa98978b79e2692dd4202ba3f4b9c8728e8","sha512":"2f8b25a360be42b2d0aa42ff7e312ae90e0748eaf921b8465b2b610482cc2095e096388e94902953346aef316e8db1a7428edb43afaeb669b5a3b24adc7a4a91","ssdeep":"192:SKzlz01Zc/0cpNmX9GDQ+y8ozO10yGLAXIn+E7k7h+Zt:SKzlzkC0cpYX9GDo8oz+0/A4uhgt","tlshash":"6a42868bb1d2f4065783a074042f5506a63b1e99741f899cf97ec8c6ed3894da13bf78","first_seen":"2025-10-31T04:59:47.993568Z","last_seen":"2026-05-27T16:33:56.511019Z","times_seen":10,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/css/5243.fc516bb0.css","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /css/5243.fc516bb0.css HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-521a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21018,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21018), with no line terminators","md5":"4c52b7cc9243366d0d291e9fdb5dff63","sha1":"de4b11c8a07270f80dda61463032073a9f507a65","sha256":"985d3f945708084a957f44410a4b74c0960e3f3ef05032647e9d50268f879d2a","sha512":"9cd563ca766f9139a4913ba735ac32db779ec45c8c0577bfee810b97cfa4f4965bae72106ef774bc72ca1c27569f303233de0c75bdac1c0f4e7cdfacdbba4801","ssdeep":"192:OcCU+4ERDc2hOzTOhCcPtWVAfZSdA679N3DlD9tg6Wl8ZMoBrXajXfg3CdMf9oxX:pXERgUOPOhCcPtWVMANq7dIRud95lB","tlshash":"f392a022f5cc4508a93bdcba5670d765562cb392d3000b2bfe6af2b45f431e72253b56","first_seen":"2025-08-04T00:26:38.244135Z","last_seen":"2026-07-01T04:42:16.46792Z","times_seen":14,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:27.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-ent-id\r\nReferer: https://dapp.vetrn-vip1.com/\r\nOrigin: https://dapp.vetrn-vip1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://dapp.vetrn-vip1.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: content-type,x-ent-id\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Tue, 03 Feb 2026 19:09:27 GMT\r\nEO-LOG-UUID: 14238537264167870466\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T00:54:02.896645Z","times_seen":17863441,"resource_available":true,"data":null}},"time_used":815,"timings":{"blocked":276,"dns":227,"connect":19,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/wld.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/wld.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:52:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ded0a-2851\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"7aa5e42b0c562e4473b3d372bd70b658","sha1":"ca1821d49c5f6a2ce9093965d0d13069aa1a57aa","sha256":"cfc448f6cb74edad3f7bbec7e5dfe2b10e069b6b749f85cdd0880b81fdae72a6","sha512":"c91f0a8ebed8301d24c651ae01c31c25deef79619f96fd5b5242a8c1968ebb7ac23ec9ff20a320799dab8bfdcf33df8bd7ebf9d8a0d2c4a9662514335a703e7c","ssdeep":"192:DSHIIHUCD4waqt0k7jcAwwKZnUy1bQaiMtmz2jNxbYnUNmwFFpBPxME9:250wb0QjVr1ubQaiMmGxb+amwBPxME9","tlshash":"a422c0075298cc54640b47672a52cc4b4f66b6f1f3950e88fdaea20fd218a0f72b2f81","first_seen":"2024-08-29T18:12:54.712994Z","last_seen":"2026-05-11T12:18:11.031783Z","times_seen":17,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/qtum.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/qtum.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:52:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697decf6-23e7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9191,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"ae1fac2baabc19909e7e78cc9c419df9","sha1":"b762a9c7174f6dfc8e7cd5a4c94180ddfa7c9e0b","sha256":"169ecedaacb2887e3233ebc1dc4c66315a51c3a4cf5c7e63502775703633e32c","sha512":"fd0e601f1e844b35aba80503e9f8332cec7e1272b8101f1b2bfe9a170bcfd4416c97037cbae01fdccd10f5bb29868dd14e8b3104fa29f82278dfbd8954fa977c","ssdeep":"192:ISXQVIcvRGhStm0z+AkHmklTLl6OQhO0I7vEL2Kv1x8EfdOW9vJJO:PAVfGEmqkHzRLDIZHffdOz","tlshash":"17129ecb8c55b13a5e539e45a0330a92b2c281e328390c3755bde7347c5b66170f8ae6","first_seen":"2024-08-20T02:34:44.570707Z","last_seen":"2026-08-04T22:22:17.306179Z","times_seen":66,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"camorope-client-a.meiqia.com/push/info?browser_id=705e879b1051139380b4a1f678a03c86\u0026ent_id=525156\u0026track_id=39AjSjd6jiHODUgiVifiESAzoae\u0026visit_id=39AjSfYwU9dpAQ6N2hPjYwL0HrO\u0026t=1770145771046","fqdn":"camorope-client-a.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:31.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /push/info?browser_id=705e879b1051139380b4a1f678a03c86\u0026ent_id=525156\u0026track_id=39AjSjd6jiHODUgiVifiESAzoae\u0026visit_id=39AjSfYwU9dpAQ6N2hPjYwL0HrO\u0026t=1770145771046 HTTP/1.1\r\nHost: camorope-client-a.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dapp.vetrn-vip1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dapp.vetrn-vip1.com\r\ncontent-type: application/json; charset=UTF-8\r\nserver: istio-envoy\r\nreq-cost-time: 1\r\nreq-arrive-time: 1770145771808\r\nresp-start-time: 1770145771810\r\nx-envoy-upstream-service-time: 1\r\naccess-control-expose-headers: *\r\nCache-Control: must-revalidate, no-transform, no-cache, no-store, max-age=0\r\nContent-Length: 78\r\nConnection: keep-alive\r\nDate: Tue, 03 Feb 2026 19:09:31 GMT\r\nEO-LOG-UUID: 13405426600136690468\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":78,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bdc1f091c0dd6c38012bacab0a05729e","sha1":"0b3d6b0e19905c980c04b02038022dcfda1bdcc8","sha256":"bbdd2259fbe81e42ce1fc5010d997acaf34b44f6b519c0fe001feb1524fef80d","sha512":"cb0c966edaaaa3a2d5de092083d6257de3291ebdc263ebc558aec1eab883e607513df1d1c39b0a7c9b4b5354c94507329011d93730e6b3304f2b17bef6b397e4","ssdeep":"","tlshash":"1ba0220ecc3e30a88c082f2203002e03882c0cff0200b3fe232cfb2802e20338020a8b","first_seen":"2026-02-03T19:09:59.985579Z","last_seen":"2026-02-03T19:09:59.985579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1217,"timings":{"blocked":319,"dns":274,"connect":19,"send":0,"wait":578,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/css/chunk-vendors.2760ac0f.css","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:24.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /css/chunk-vendors.2760ac0f.css HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-10159\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65881,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"28924d785118aca9346b6bbfff39c464","sha1":"21c38010985bfd754dd2663a990cd598543ab503","sha256":"26522f86a8e633acbd6403848e966e251cf8944c04fd1d437c3d24638800656e","sha512":"f229bdcb7fe53ff3eded258be39987475774e557d3082366cf74d17bb0e115a6a83c3dfed0da7b0bc9488f8a1d092c688369d57dbab26acdb4ece9929813a122","ssdeep":"1536:PGN5J+jOkiHcZiNEBVcZH5NHMja4drYY1j/Vvp:PYeVc5HMjajWn","tlshash":"c4530ba688c412ec731bc912dbc4f6d8d1a5f033d9a10d99f10a661d8fdbb461296f3b","first_seen":"2025-08-04T00:26:38.426706Z","last_seen":"2026-05-27T16:33:56.43257Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/css/7098.927ad6b5.css","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /css/7098.927ad6b5.css HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Feb 2026 11:30:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc60-4d63\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19811,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19811), with no line terminators","md5":"f0ba3c684897947c890178a109cc89e7","sha1":"8e94d07642564b452ce101817970ceb1c6b1f0f4","sha256":"d8be41c70c1bebcf83dbf385074946658e8bb77568019633a0684b89a7221f8d","sha512":"1b33721137f638174afea16ad77ac3dafd3427ec5fb6ac7fbd69d1a4bae1424f41eda6972566791531577e100628397c6ab2b7c192ce8a5ffe854ba167cc3632","ssdeep":"96:gY9b8EV6Go/BTT7tJi6i+NS3VKgLUcoN7BNd3rCoQs1QOLkz5ea/Ny4DkkoVzZlN:gYiS8m+NS4M6as1HaQsyiMf","tlshash":"3392a3a2b48d440d6537eeb91124ebbc1e2c3796c7001eaedd6af7f86e011d73216b46","first_seen":"2025-08-04T00:26:38.356417Z","last_seen":"2026-03-12T14:13:05.092877Z","times_seen":8,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/news!list.action?language=en","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/news!list.action?language=en HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nsign: 3694E5E568B8440E2AE30E0A3260A2BD\r\ntissuePaper: 1770145768\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2631,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f5f6ec0a710788d654f7a8d4f9c89d7b","sha1":"a655be7b2601b5c38359bca603e3fb8a18c61c7d","sha256":"e4f9ef01b6f4f442f6a6318b68a3fddd9e8d7352ccdb8b5ea3c0fa674da1da3d","sha512":"5afb34402393fd7c00c5c1aaf18e4a80a86522fa20fa876eb3f29ebdbbec8ba4dfb0c230d2bafe2b391bdd91427a6fb5757583c6aeba60b5936ca9c3817a8725","ssdeep":"","tlshash":"b251954b0e4c147edf4681d37b6b7a81b3b8121e5ea18999e50fee2c11e2035137b2a9","first_seen":"2026-02-03T19:10:00.004973Z","last_seen":"2026-02-03T19:26:12.258593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/xtz.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/xtz.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:52:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ded11-2afb\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11003,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"4446f98aa8dcfb140370ebc329575aeb","sha1":"b386b4aff401570f8c742d9e883c685dbeecd2c6","sha256":"2468fc0eab3ce67fd84833064c07a97e5456f137584d12da75740517590cbabf","sha512":"ef8d292f8ec421e0955b37b765e19fa2f450fc8f897f656f413127d2df1e0a334ddd0f43b051189bfb8407c10ed902448cf26dbef9d7b2a6b31cbdcd2338548a","ssdeep":"192:6SHIIHUCD4waKIw4NIoFpOFji4xbHKZ6dLirtbdgYCKz0aP0sh0pJr6/zyuGdAQF:150w0SoF4FXqZ6NENCKzIO0FgjfQSU","tlshash":"7932bfcb9c955a52c0902396392aa3044e0ff92843a12a24faedd30f49257d09878fbb","first_seen":"2024-01-27T10:59:08Z","last_seen":"2026-08-04T22:22:17.244114Z","times_seen":177,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:30.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ntissuePaper: 1770145770\r\nsign: 9B8EFDC9751469A86CA8DF000C1C7518\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:31 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4310,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6675ff47045587220d08bdc576353c5b","sha1":"c5fff2ba8575357a28a376ad0899577f7f7a2c95","sha256":"45da916163a9d3c23c568d48a070ce5c03b9049f6070c015b1fef03d67456982","sha512":"71a423890ca517a0d8ae77748d073bddccdffbcf24a6db91c03cd1c85a19fbbf3e31be7f92ebafbae650ba935041000bdffcbc0883c4c027539ab5ac5e9b34ee","ssdeep":"48:Yds4JyqJvbDaD/wAu2JtZTqfwY+XHBJsY6T5K79RhHEEuo79tcqpkBS:h8hJvfYTfJtZmfxiHBJs78BL6ohtcquk","tlshash":"a991bd46b7658e6d90d58d879be16ffe312e321650c46f4677de8ee410803a3760fa12","first_seen":"2026-02-03T19:09:59.795266Z","last_seen":"2026-02-03T19:09:59.795266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:40.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ntissuePaper: 1770145780\r\nsign: DC1307E5E9ACA6C1B98FF358CBDD6A92\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nCookie: MEIQIA_TRACK_ID=39AjSjd6jiHODUgiVifiESAzoae; MEIQIA_VISIT_ID=39AjSfYwU9dpAQ6N2hPjYwL0HrO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:40 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4312,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"04d257a7aae796f81c6a6cc4ac40d4ae","sha1":"b25ec78d50248ccab39d2b92fa10e7f9518d7b19","sha256":"6d61ffa010bc4a512d61e75814c9494ec1d9a2ca23cd7e9dba680b45de737d63","sha512":"99956f2891fa41bbe518ad674dc16869f5fdf512c45278ff351a0bbc7bb37667fd9d07e715a3d5b1b8cfeb2cf4c923ef3f7d836bad6fe51035a01932411756a8","ssdeep":"96:hiOvluU6k/KaJezTf97CJCOJB/Bwvno7La+yb:puxkV4o+w8","tlshash":"73917b46b3568ead90d14d83aad2affd352e331254c86f4b77ce8ee42191363750fa06","first_seen":"2026-02-03T19:09:59.845181Z","last_seen":"2026-02-03T19:09:59.845181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/8725.3a6a18fc057a7be3.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /js/8725.3a6a18fc057a7be3.js HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-5b4b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23371,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23346), with no line terminators","md5":"a8ac5edd56649b1d5dd62018e7134a22","sha1":"ac9c39a2049a6667677db5741a8cd9ea69402da5","sha256":"92cc708aaf710c8001206620c23045daa342b9200f9037b1c156291d510ce90e","sha512":"1f1513c011196278b14328a9f660e8deea5ef38cee32b625b7d46795b05515d043aa5586ab716196ef4d5e24a2e1d502af90baf6e091163071921a61aa5334b0","ssdeep":"384:Zddn1feBBnyL1/gQ7znBVBOTNBdBAjUDNgNGGFG9wunpOUXocRzRDCChvctfe8Wk:ZdnePny5YkmgtG9wunymVAzt/Qq5IbGP","tlshash":"c4a2494cf4e2f06a42e766b5507f252de23b3dd4ba0b44906b34e4867eb458d6273e88","first_seen":"2026-02-03T19:10:00.014559Z","last_seen":"2026-02-03T19:10:00.014559Z","times_seen":1,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/css/2814.1926e27d.css","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /css/2814.1926e27d.css HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-7ccc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31948,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31948), with no line terminators","md5":"8673972ec82a5b2ad01a071d374f3214","sha1":"d4119e2f614d0d32bc69a3b9c4125a175804dfc5","sha256":"f9b0281755c794449337fbc4ef4c3ef78494c9642cdb77ed10020f2592423820","sha512":"f7228f579eeddadfdedd17dc64ee93ab86eae48e4b09ba2da0531b0451c235b6bc84d8a54e11ec545f38a334b24825503c983056a34254a1bebfed45579209cd","ssdeep":"192:dCQjm5n53swtfrJ7O9q9jrvxj2dAW953Jqf11WEgO6Qk9omO:wQ4BdO9SPh2dHZqfpR6Qx","tlshash":"8ce23922b88d010d757bdc695670e7b8972c73a6c3001e6aedaef3b42e461d73217b46","first_seen":"2025-08-04T00:26:38.48042Z","last_seen":"2026-02-03T19:26:12.24291Z","times_seen":4,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:27.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"POST /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nx-ent-id: b85f8714b62b44d4feca812b2224ac73\r\nContent-Length: 47\r\nOrigin: https://dapp.vetrn-vip1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"entToken\":\"b85f8714b62b44d4feca812b2224ac73\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\naccess-control-allow-origin: https://dapp.vetrn-vip1.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=UTF-8\r\nreq-cost-time: 2\r\nreq-arrive-time: 1770145767686\r\nresp-start-time: 1770145767689\r\nx-envoy-upstream-service-time: 2\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Tue, 03 Feb 2026 19:09:27 GMT\r\nEO-LOG-UUID: 3634767489064769792\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":996,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a45b84e330acfa876cf27e2c67cf3281","sha1":"35542af58aaa2c66a574adc527dcbd83c76ed8a5","sha256":"330a9a54846ce2282fb57205d57d96468b186b3f968f1dcf85008e43ff896338","sha512":"ee52285bf0e860f262c620813dc770d1858cf7f31f4d828b38bf663c5843e2d2af2fa2e3111794b05b3e3f99fb7f74ffd205e502724c563130859e83e2ac16dd","ssdeep":"","tlshash":"42118c5346a809aa5f1807ca5605110ac59fb00f1cc4dfbfd922be44843f39a03e434d","first_seen":"2026-02-03T19:10:00.040135Z","last_seen":"2026-02-03T19:26:12.280875Z","times_seen":2,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":229,"connect":19,"send":0,"wait":265,"receive":18,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/item!list.action","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/item!list.action HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ntissuePaper: 1770145768\r\nsign: 3694E5E568B8440E2AE30E0A3260A2BD\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1180,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dea8a29f69907b8f390b22478bd356c9","sha1":"6aa3feeb073572b69c88496323fa4a987a10f99c","sha256":"1b866838a0d9a7bf7b81b724504f65ebc7a8f98ac140490fa3ed8c7762dfda98","sha512":"f407d65cb9d8718f04fb0ef451fb00c1e4ea24e41d9a0f67b1e4f5919618fb24a275bf2f8d4f5bdd5d527175f523f0d1f8d778d81b017fdf6f86ff88dd977355","ssdeep":"","tlshash":"8721a92a67255e2f9a97dbc314fe5f6f21082449c985d38db9aa5e1d0bd0ec9133b320","first_seen":"2025-08-04T00:26:37.98311Z","last_seen":"2026-02-03T19:26:12.214318Z","times_seen":4,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/chunk-vendors.8236cd7be611f853.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:24.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /js/chunk-vendors.8236cd7be611f853.js HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-636ec\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407276,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53218), with escape sequences","md5":"a008ef3110e57b613c5499878a5c8d29","sha1":"1d39ad51dc1a0693b2499f95819947402518a0c8","sha256":"6707cbe7685497136436bd8c292dad74281739165191f494cbfb8e06d6c18310","sha512":"4fad80c26f8600756872fb44b89ad529b662968a8fc62f68ecbeb434d6c5de450659bd1eef07b90617639212980f1ed2752c00ec0f5ef146aaf91fcaed78e037","ssdeep":"3072:CaWtsgg1wer2zcg2rUgM4HuiLoG3jyCnU91wSXJnIdJ9ATnduC+BydIML31LA0vD:pWtng1werP4t4HuiLZyp1jUuA0vliAC4","tlshash":"4884f7c9b295b07147e720e4407f150bf23aa929640e84d4f265e4e6bcbc99e913bf3d","first_seen":"2026-02-03T19:10:00.044741Z","last_seen":"2026-02-03T19:10:00.044741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/5371.eb5eec9fded3a249.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /js/5371.eb5eec9fded3a249.js HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-28da\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10458,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10458), with no line terminators","md5":"846747923a82e4c8f6dd33aef82cb120","sha1":"89b4bacea37a7a5196707e08b0eb9c50cc0ca3ed","sha256":"1b7efeb048f7db7f21ea0cd7397d5e5bbbffa031915001a386b4e18f0866d6d9","sha512":"7c1531ef2213e2bf375d9c43e79eef234661150c113f15675797871e8cbfee7428d9d24b4f1d2229bb08935bac9d9e08dcd5122b19b3babf9ca1de270988b781","ssdeep":"192:bIhL/PcoWcwfVZylONLBlYE9M4M5gA5PGI:bCL/EoW9fV8lOlBlHZA5uI","tlshash":"6322c689f2c2f821175320e5a05f1102d36a765cb41b449df576e8e26e6df8c62baf3c","first_seen":"2024-08-20T02:34:44.568838Z","last_seen":"2026-06-03T09:56:52.901702Z","times_seen":16,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/7139.589a901ec7c511f6.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /js/7139.589a901ec7c511f6.js HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-4eb5\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20149,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20149), with no line terminators","md5":"30f0a2ac961f6717ba8cedc9313e9beb","sha1":"edd541ebed91619b5b0466a273c11e42689f751f","sha256":"45a9a729aac77e2b97337f2091895845662e9fa4e35867f6e09dd7de64c9aa26","sha512":"70620657e85c3e8a800e8d83b2448257ca9b30aa71a55a4d58f027f5a2ed6a4df482fd3e9453eb9a33679a1d1ec5f74acf23827bb4c255365bfc27a8f75517e5","ssdeep":"384:u8QAThSj5mZN06saYULFxCf2xXr07ygzLnXMHO1Nn1zBxr41m89:iATMVmZNyyLFxCOVmjzbMu1Nn1lp41l9","tlshash":"1b920acd76c4f1a206d791b6409f000e72378929510e9810b595eaed2d3ddbea37be3d","first_seen":"2025-10-31T04:59:48.192844Z","last_seen":"2026-05-27T16:33:56.384165Z","times_seen":10,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/5221.f9484730d4eff7e6.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /js/5221.f9484730d4eff7e6.js HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-2c7f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11391,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11325), with no line terminators","md5":"b575928c2d23639e5c9b9c194b2fff19","sha1":"ff0dcb6d3c1d9bce855729336ec48c6d98837059","sha256":"3c981fe89538d2220deb835895fe6c1a90aa001501de309970b01b627ed0eb10","sha512":"37d0c38935f4dd6a29b6af91c1bafd5e87796eee6138cd0189b6c07a90c2bc6cad03eaab5ac0f8949b46134794570e28111275d5c4eec82b67bfac4525d8e26f","ssdeep":"192:YFMO1Bk7oIj68x/xTZmCEoq/RC4dCOPDGDF9hvawnI9WzPHXJ4MZK++FRlyZ4T2:Y91Bk7oIj6k1j0RRCO49hva2JJ4ZT2","tlshash":"1a32b74d70d274ae268b0065007f5311a2323dd8989a985cbbbdfce56a5dd6cb03e7bc","first_seen":"2025-08-04T00:26:37.974861Z","last_seen":"2026-03-12T14:13:05.148565Z","times_seen":9,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/2814.efcc1da6b99ee0c8.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /js/2814.efcc1da6b99ee0c8.js HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-4394b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":276811,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65266), with no line terminators","md5":"dbcee8190f2b863c9dcb8c8eba5b208c","sha1":"724186a85031e0c22692edeed69cc1079ac8c5f8","sha256":"d27ef9cc7fe248e38c01be4877c3336ed0644a7c4583ec16ef1f3e619f30e3f6","sha512":"e5f9c4eecd47ae5dc6868d46597e6127956a43f331a6d6d66fbf3bc2f17f2bf761c6991b4abb629015e2766cfa70ccf1203b9474e96d8aad84dd4d851da0fe4f","ssdeep":"6144:AsA2XSZF9I/sNHC6DEolop+obMS8LxusaEc3s9m:rsNH7DlYMJZaU8","tlshash":"a244f794f396b0258696a075003f150bb2362454a4cbc5ccf279dae96ebc88d36b7f3d","first_seen":"2026-02-03T19:10:00.071807Z","last_seen":"2026-02-03T19:10:00.071807Z","times_seen":1,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/3850.67819b25993268bf.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /js/3850.67819b25993268bf.js HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-ac3c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44092,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43728), with no line terminators","md5":"d5fd502f4f9ca512554c43de9013c4e7","sha1":"cccda83add870411c9ff33ba1cb6d145e71c6b9c","sha256":"c7a31c1095c49d542f74a5c2e5524172d71b46cc1e3d4531b0a48cfc1d4a10bd","sha512":"5ec6562ee180221861150ffb4a0f11d5a8849ae0a12f37554e3175caccaa07c943e1e8d2538f09e10a3fdaf008538f15fc9eab5dd391cf1e559d22c17346056e","ssdeep":"384:q5kE3ytQbLatP6FFMF4Nj90S9ltYqgtWtitcvmeEJQAlw171XUtVg9IFIA4eAw73:q5NbcPJ0lOqdEbqXWz4eAw7KZcFf7l1d","tlshash":"7c131941b087eaf9ddaf4055a11e0870d4373fd69422e182f77c99a0a7e8ca55b0e7bc","first_seen":"2026-02-03T19:10:00.078516Z","last_seen":"2026-02-03T19:10:00.078516Z","times_seen":1,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/js/Home.227c92c7a2d13d78.js","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /js/Home.227c92c7a2d13d78.js HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:30:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5c-226b24\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2255652,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64579), with no line terminators","md5":"0ec5c89fa3a4c23c393577ba8cf8f7a9","sha1":"ffa0a28abde0cee9769e65a52e3e59ec8fc2952c","sha256":"0b757e4e13ff3b3adb0dc6afeeb80b44f8999a681c05089203f02a480a9840b9","sha512":"f53a5386b874447ef1d414492b451ff6f38dca9fa4e649b8499fdf10c8a0d52a6bd01d70f9aa33bcbc407289648357002227d808947c958aefabce5c35405e82","ssdeep":"12288:zgxrCr3aEp6XeQabZ+Q29qxHmABXu3HIut+AUZB4pk0cWkJ:GC7aEpmO+Q29WHlBe3Hlt+AUT4xkJ","tlshash":"95253c987284f02647a33178507f140b92362a49a44e8548bf3ad8d6adbd95f733bf3d","first_seen":"2026-02-03T19:10:00.087561Z","last_seen":"2026-02-03T19:10:00.087561Z","times_seen":1,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/news!list_v2_popup.action?token=\u0026language=en","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/news!list_v2_popup.action?token=\u0026language=en HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nsign: 3694E5E568B8440E2AE30E0A3260A2BD\r\ntissuePaper: 1770145768\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e3757d1e5c9a2c2de18c5ec1454f8f56","sha1":"c42cf57550ddd57c764ba787948b96a705e5bbf6","sha256":"96b779914dd172ea50a83b9cb999f689ffa62f3c87ff172ba58c81997afe235f","sha512":"fe538e78a87ba1c32995d17f1bbf24fb26cafb354fffad7226a009cfccd95e38aef66c3a7395a64c04ddd1f9aeef337644347801bcef7de18818452a1f09c015","ssdeep":"","tlshash":"b0800000280e3c0b0803208ce88cba8000ac22a308e0cb300e8cab3082ae2b22800830","first_seen":"2025-05-31T16:35:33.087883Z","last_seen":"2026-07-29T06:15:23.009022Z","times_seen":37,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/css/app.c5666afc.css","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:24.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /css/app.c5666afc.css HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Feb 2026 11:30:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5c-1ae95\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110229,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"e8792375375bc5e2602765552c827fac","sha1":"463ae83151a58a190cc62131866f56de7c962290","sha256":"fa9797154d2554fd0a62e4a692ba7d90bab2fa466ad93de244a98d60ff4f5530","sha512":"ba4bafee920b58d75fca146b1a2e913844c977b597e7117a2415f43630ade411ebe37a3dd5cb4e2011a9351f3639899a3788489c116fa8ecd96fff894060dbab","ssdeep":"768:KhRAzMHYBHhOPsk3x4SwIyNp9ev0eE2TptAmxGHRvGs4oxfzEvA0f96nGIcRVLQ:KhRAzMBx4qyNp9e8eRTpl4zEvA0tM","tlshash":"35b36def3d5e2288a777cf7289626bf81956f70a9283a4ced8437961cd422c3381f155","first_seen":"2026-02-03T19:10:00.090335Z","last_seen":"2026-02-03T19:26:12.313868Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/css/3850.37a2cade.css","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:26.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /css/3850.37a2cade.css HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Feb 2026 11:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6981dc5f-7ded\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32237,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (32237), with no line terminators","md5":"a9287a16c31149d43899f3ce24a72c1b","sha1":"5ed6a5ef48849df48b7356668e2f6e31fef84f98","sha256":"350507f85a418593c4684cd288dce08d61d448d9472c66baad92820f19183091","sha512":"24b64164aba2b6e20607e9422c15295ac23682090caaf6326d58c38855402c44d348f7bf6be75793da61099bd5762db684c7657a03888be45a20518b3a931336","ssdeep":"192:gyor562bLnJ9fibLzOi4NuO1BPtWz3k1/vh3eFBasIloE2mIOSAiwDb9TupRA:I1i4N5FWz3+BeFBadlghOSAi6pupy","tlshash":"2ce2b076f8cc14083577dcb95171eb685a2c73a2c3004e6aed6af3b42d521eb7213b5a","first_seen":"2026-02-03T19:10:00.096397Z","last_seen":"2026-02-03T19:10:00.096397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/news!list.action?language=en","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/news!list.action?language=en HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nsign: 3694E5E568B8440E2AE30E0A3260A2BD\r\ntissuePaper: 1770145768\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2631,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f5f6ec0a710788d654f7a8d4f9c89d7b","sha1":"a655be7b2601b5c38359bca603e3fb8a18c61c7d","sha256":"e4f9ef01b6f4f442f6a6318b68a3fddd9e8d7352ccdb8b5ea3c0fa674da1da3d","sha512":"5afb34402393fd7c00c5c1aaf18e4a80a86522fa20fa876eb3f29ebdbbec8ba4dfb0c230d2bafe2b391bdd91427a6fb5757583c6aeba60b5936ca9c3817a8725","ssdeep":"","tlshash":"b251954b0e4c147edf4681d37b6b7a81b3b8121e5ea18999e50fee2c11e2035137b2a9","first_seen":"2026-02-03T19:10:00.004973Z","last_seen":"2026-02-03T19:26:12.258593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ntissuePaper: 1770145768\r\nsign: 3694E5E568B8440E2AE30E0A3260A2BD\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4310,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6675ff47045587220d08bdc576353c5b","sha1":"c5fff2ba8575357a28a376ad0899577f7f7a2c95","sha256":"45da916163a9d3c23c568d48a070ce5c03b9049f6070c015b1fef03d67456982","sha512":"71a423890ca517a0d8ae77748d073bddccdffbcf24a6db91c03cd1c85a19fbbf3e31be7f92ebafbae650ba935041000bdffcbc0883c4c027539ab5ac5e9b34ee","ssdeep":"48:Yds4JyqJvbDaD/wAu2JtZTqfwY+XHBJsY6T5K79RhHEEuo79tcqpkBS:h8hJvfYTfJtZmfxiHBJs78BL6ohtcquk","tlshash":"a991bd46b7658e6d90d58d879be16ffe312e321650c46f4677de8ee410803a3760fa12","first_seen":"2026-02-03T19:09:59.795266Z","last_seen":"2026-02-03T19:09:59.795266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/mln.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/mln.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:52:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697decea-2861\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10337,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 199, 8-bit/color RGBA, non-interlaced","md5":"663a96abfe8e6e80acecd8a023f7cb41","sha1":"6c3a2d864b2cb1a26a42e72aab4ec120e17003cd","sha256":"3d67d608aa5c80a6876c0c3ae4fd56cb825851904d20ef8827257b4fc26714f9","sha512":"01cdb3049eb2db37fba3cd4381aac959759031265428bfd4c9f8320c4ebf20eea602762408a2dc1cbe46d13b3877f36d72a6960b9c2475ee4023ea8b7b6daae5","ssdeep":"192:uSHIIHUCD4waQbjUDgmBnFA2hYEWXqdY0f0c3UVThi2IbPbuLzLnOyn4e:R50wnbjMdF4Xh1ZThi2IbPqzLnOxe","tlshash":"5122aee7d844881a3949069a211fd410b6b7dfb19b3a011e2dfb33184b649a23cea589","first_seen":"2023-10-21T18:09:32Z","last_seen":"2026-08-01T16:33:23.886479Z","times_seen":82,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/shib.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/shib.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:52:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697decf9-72df\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29407,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 204, 8-bit/color RGBA, non-interlaced","md5":"ec87c449e9680cf15610040cea9c1acc","sha1":"b737ce4089b38b14c8dede790047443fc56f2a9d","sha256":"7fe3aea119a2b0e4e8a4ba7691394ef270ccda305057cbaa0b1b5373f95184d1","sha512":"55dad4e6bef30352150a2bab9d240d5767d5f6c0aef5b94c58a3da05d16e446ab94c317d5cc401f6da5fa03b94da08f7fc92b51a74059e66e59466d315db9be9","ssdeep":"768:X91p6IJTKiYeIWlnsX/0mFpWFOPXrpIoBPALrvsio8aAe7z:t3aokBpcaXFK0iRe/","tlshash":"98d2e0d792248c28119a92fea4069fee096e50ec437fd812919dc31b53614922d3ef35","first_seen":"2024-04-26T13:41:40Z","last_seen":"2026-08-04T22:22:17.297392Z","times_seen":74,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:33.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/hobi!getRealtime.action?symbol=wld,wdc,btc,eth,xtz,ada,yfii,mln,yfi,dai,etc,xrp,ltc,usdc,knc,doge,vet,shib,qtum,icp HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ntissuePaper: 1770145773\r\nsign: E88FEB835C5D62F0DC84F8FF48BBE931\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nCookie: MEIQIA_TRACK_ID=39AjSjd6jiHODUgiVifiESAzoae; MEIQIA_VISIT_ID=39AjSfYwU9dpAQ6N2hPjYwL0HrO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:33 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4312,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"170ae0b539d35040e3a6175ea884ba43","sha1":"a572b0257cb3f7501795edad823d5fa48e1944a2","sha256":"bc814ae6b636e512eac553f4e85172244d60ae1ac31e9cb23cc1886b31c14bae","sha512":"d2e50c71a90c01d6c0c5427a8f6d87acc9fae87719ce34842c9590b895de86c83166ef7769d1b5699f6bcce48a807fccb1ee73891f2a06b0ed133976fbe9dd34","ssdeep":"96:h0HvEVOG1J606foMJTt3sJ2/wMxo+xpN4ja:AC0GAwMjPNZ","tlshash":"8791cb46bb618e6e90d18d839ac2affe313e321254c56b4a37cfcea410803a3764f511","first_seen":"2026-02-03T19:10:00.111095Z","last_seen":"2026-02-03T19:10:00.111095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/dist/meiqia.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.14.42","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:25.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /dist/meiqia.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 03 Apr 2023 08:55:42 GMT\r\ncontent-encoding: gzip\r\ndate: Tue, 16 Sep 2025 08:04:27 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-oss-request-id: 68C91A0B8EBFCE32382BFE61\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4935971144364316245\r\nx-oss-storage-class: Standard\r\ncontent-md5: XKvjY1vPCi2zO06SSoP4Tw==\r\nx-oss-server-time: 26\r\ncontent-length: 5747\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 15046665722704550969\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16342,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16306)","md5":"5cabe3635bcf0a2db33b4e924a83f84f","sha1":"dc1188b1f0cf9a08095984897454427da574bb6e","sha256":"13e0593db078d5f1f99544cd9aafbdb1d1eeb8777677b3d001bb1cf66819ac4d","sha512":"3941a8a8b3c277aa60a8b5931e6c3a85d38263a1351ef42e9083266c429f1e3f0f25b08dd8a85d8c2e60dbb48360ea01f419d6cde101a470b11ab658c5302385","ssdeep":"192:K04adJyHIJgekJElGZQz6cFDZsWBn25HrlT6NKSn2QcWByxGmsHZQzq7vE4o7oKq:oHik+BbF904Nua2Nqw4KoKNNlYWC","tlshash":"c9723fcdb5c2b0804ba36160422fa81bf2775aa5745f98c0a365d1f8ac7994f80b7f2d","first_seen":"2023-04-07T01:00:08Z","last_seen":"2026-06-02T03:15:54.772888Z","times_seen":1991,"resource_available":true,"data":null}},"time_used":2917,"timings":{"blocked":1323,"dns":778,"connect":268,"send":0,"wait":269,"receive":1,"ssl":274},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/wap/api/banner!list.action?model=top\u0026language=en","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /wap/api/banner!list.action?model=top\u0026language=en HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nsign: 3694E5E568B8440E2AE30E0A3260A2BD\r\ntissuePaper: 1770145768\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Requested-With,sign,tissuePaper\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111570,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"98a1612e0709ba12386a97950458ef55","sha1":"c58488360ed3ed1e660e60e6b42dfac22a9dd359","sha256":"2a0a187170ce0ca687f12bbcef04aff22633c447d2b6ced70df4b51a8d021ea4","sha512":"83e67bd6334d8a62193d983a33d30ac14b516e1096a067ea1bfff7cfb6180a99e1abc9bdf4f4f7bfa5618ef6686ce8132bd0aacc966f3a3e1bfc03381012f66e","ssdeep":"3072:qKr6WdODLdIwcPO/NhE22KSJCUqyumvmn:qOiLdIDOFhE2wJymvmn","tlshash":"8fb3e014ebb6ed29080199eb152236c1e4bcfbf185ec90ff308568e7f4b1db4d129666","first_seen":"2025-10-31T04:59:47.913379Z","last_seen":"2026-05-27T16:33:56.559136Z","times_seen":5,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/yfi.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/yfi.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:52:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ded11-260d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"120b094df5b67a007a3cb10bdd9ccd28","sha1":"f274cfd81557ebfdf7bd02beb1594939a1271f17","sha256":"3c037e637d4449ed2fcb0f72137d8af6ce5560e2a3d8dac3897e08252d83fc4e","sha512":"84bf810eb5ad50ad9b0ac0b77b68483a4d653248794f277ebbc87134b7d7a7c94e13d7218c75d1f009926daa1d7f8e167ece83f56013fff737a5a486c3665a27","ssdeep":"192:ISPifqDIvYJ7B+eGlf/yQIgZHL4qZLgoBvdYPFbxFUaVnGvXKywV/kCZllVszO6:PPiyDic7/Glf/QgZ9bleRGvXK7kCczO6","tlshash":"e512bfd8d773a458afb3ccd6f7899506f89f3970594a87598ff767033a024a0021d2a3","first_seen":"2024-04-26T13:41:40Z","last_seen":"2026-08-04T22:22:17.331179Z","times_seen":90,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.vetrn-vip1.com/symbol/icp.png","fqdn":"dapp.vetrn-vip1.com","domain":"vetrn-vip1.com","tld":"com"},"ip":{"addr":"202.95.15.34","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.vetrn-vip1.com/","date":"2026-02-03T19:09:28.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.vetrn-vip1.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 31 Jan 2026 10:00:00 GMT","end":"Fri, 01 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"DC:98:93:31:4D:1B:0F:AA:DA:A6:8B:B5:64:F9:3A:8A:78:09:82:6F","sha256":"CD:0E:A7:C3:39:CD:59:AC:F4:A6:52:AF:66:94:2D:84:08:31:68:EF:5A:A3:6C:A2:20:03:4B:C2:27:CB:96:2D"}}},"request":{"raw":"GET /symbol/icp.png HTTP/1.1\r\nHost: dapp.vetrn-vip1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.vetrn-vip1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:09:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 11:51:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697decdc-617\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e906697de32eb7e1420f46bd4da7cd67","sha1":"d0f7184d0ff38878e831c144adff337cc0491674","sha256":"ce49c1f0b7dc5863f73c4423b606298fd367fbe32ee3696739ba1b72d807bb4d","sha512":"df582a3537249deb5266554b8c5f88458655fae63630f007436b43cb075a4a22663277dc3873758aeae50e4fc2abaf24b5ea224c54dcf8987195a043cbdab668","ssdeep":"","tlshash":"a7310ae99993516aaff8a51387383c787c4a20e0371c1a8442a3fe8f2b0d520188ad57","first_seen":"2023-06-06T18:28:25Z","last_seen":"2026-08-12T18:00:37.10978Z","times_seen":1611,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.vetrn-vip1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}