{"report_id":"279cce6d-0b08-4dc4-825a-6e81d8430cc5","version":0,"status":"done","tags":[],"date":"2026-08-18T14:03:32Z","url":{"schema":"http","addr":"gyaj2o1.cc/","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"104.21.27.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gyaj2o1.cc/#/home","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"title":"Crypto World","dom":{"size":3405045,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (60829)","md5":"ae5e3c5fb781c85110256cb1d5b22285","sha1":"13e72ce828cc735102e84b5f1dd9564c1a04ccb9","sha256":"1f2f7063e1a384961a5e3ab12e26d389556c7f0d01e065f1dc5cff57cb3b854f","sha512":"0431e899d3b38243cb6c54bc3645c9bfb0e13a583fcb50d4080c2481d9c18cf4a8e3dcaf4abf44b7e905c79f3cd1bc85a70a51d024c7fd0b16f661c47f731d35","ssdeep":"49152:7vgf8A3UspB/qDVcMU/AiAJ0N2AbUE/VcMUGw:v","tlshash":"aaf523b1af2c1dae01994379e3f2798c2f5d84a7b6518ca4799c19f35a63900fd2fc90","dom_hash":"domhash2a61e4c7a20fd7a1eeabc5456ef40f53","first_seen":"2026-08-18T14:03:53.585871Z","last_seen":"2026-08-18T14:03:53.585871Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gyaj2o1.cc/","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"104.21.27.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T14:03:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"gyaj2o1.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"gyaj2o1.cc","ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-09","domain_rank":0,"first_seen":"2026-08-18T13:47:03.433435Z","last_seen":"2026-08-18T13:47:03.433435Z","alert_count":12,"request_count":12,"received_data":18473438,"sent_data":5397,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"h5-api-cdas.top","ip":{"addr":"104.21.25.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-17","domain_rank":0,"first_seen":"2026-08-18T13:42:48.821745Z","last_seen":"2026-08-18T13:42:48.821745Z","alert_count":0,"request_count":6,"received_data":2725,"sent_data":3414,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gyaj2o1.cc/assets/index.fb9e0596.js","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a08ad20e684c940c308a48308d55c6fe","sha1":"d5527e88654b095be30c937826cfb7045eee977e","sha256":"0d195be4f5246ddc842f7eae224fb54b4d00ae7c7ce4ee26108e8c6be749e92c","sha512":"50e9fe534b31af14dffb3ce9f4aac6dc9c8912c83e95ebb7d750e555099f789fbf4cf75a026e2ba0e9c262af5d65093ecee647a4b83b7a65591e09f1d070bc22","ssdeep":"49152:FeYC+n28/pHbisER/v/xmB5reOUlFKp8bo/WE1sVQEfOdhFfpmwJxaZNDic+JFU0:8Kcw","tlshash":"ff46d0a47650f06643f644e540bb0005f33d5b59740988e8f2bd9ceb396ad89e2bbf78","size":5408346,"data":"","first_seen":"2026-08-18T13:42:56.83443Z","last_seen":"2026-08-18T14:03:53.605997Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/assets/core.esm.b4c18107.js","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1508b4e351620da41b4047bc89c4f517","sha1":"5588a0b17a3090b3209c06c1ff9cc7839b70a9f1","sha256":"62636c63dfe259c53f1de6672bbcae7eec6d2061ef091cc1ccd47b5950b71da3","sha512":"e3bff891dfc0e4dce1ecd06060912f33530b9608b9b8ce734c86dfbc8dd766e86d504fe9cc5d8a2f5093112ed1da05c4216c0e00f29fda3912010f6704cde23a","ssdeep":"384:/dZ5hHlVWIq0kQW+dsqUk9SC7EafwczhbFk562HAsLHD:FPVi0Ts3MzhbFkA2HAwD","tlshash":"e503d78bf620382003cfa2b5d35f2b095136554db10644fcb869dffa1db992d526bbb8","size":38903,"data":"","first_seen":"2025-08-29T09:33:23.921619Z","last_seen":"2026-08-18T14:03:53.602993Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/assets/index.7a214f12.js","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94f32afa2afdaac068f292998f8ed1bc","sha1":"b84de78e3261ff0cfcd5cb75af02b55395d7da28","sha256":"65e53345311e3233d9ba03f8f0fdc1d7a1e87bb213c227cf4c3b1ce62263848b","sha512":"c0e69244b09ff4f1c8a5dbe0e7f4d3bdbe6c282bd7e12603ab2b409468cf2fa040bcd6d0e727a00d2ee2dd665c7c2a5fabeb467011ce7a10ae13e043325efc85","ssdeep":"384:wa2ge6QrJP7mE2ELZfHOlr4tjBszO5ndX+VTiy41Oqodj5zTBC+CG:wOe6EJz1iqjBe6d+MdOqoR5t","tlshash":"bbc24065f92a9539f5fb4831205c24013148ffd6d2408913f2fc1e766b86ebd2b4eba6","size":28261,"data":"","first_seen":"2026-08-18T13:42:56.792116Z","last_seen":"2026-08-18T14:03:53.590162Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/#/home","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"398812c31006609d7dd159f3c88f9981","sha1":"6a51230f52b9bc28b5384173e2e85b001fa24160","sha256":"9ccfe7eaa83d54cbae5a0faed1a51f7eb8db48d4cd92c351c599d26ddb4214e9","sha512":"26157b3d3784e0266dd3e0a0939018a16d9a3d961c6fd75f61ee2c9f5580cbbe9b8faf7bcd1f797ad423cfd3428dede4bf2c298343c4ed4fbb371f320630168e","ssdeep":"","tlshash":"2be06cfa36b69a443c46512e09cd28327151827bccee7a0c788dac006faf91c1ab8536","size":333,"data":"","first_seen":"2025-04-05T11:27:50.313999Z","last_seen":"2026-08-18T14:03:53.607335Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6dcc6e1f7db2d14e2a33850683893cfe","sha1":"d03d23232734c679e4875a58f1ec6798e376f06c","sha256":"dcef16759accb6f0ed926f9ddee4cdee0c9827cbe1befb4e2e8fb8bc22d4d9cf","sha512":"f80ef1e06e5ddda64c77c72b6d6f7e8833b149c971af25982c6eb195e0fc1c32de5283653925122a8de0b82019fa0f0407273666bbd8ecddd772d11d30ac48a9","ssdeep":"","tlshash":"6e11abfe191aa4296303404e976b7911643260b9000a184173ccea9dbb9afadd0cbb8c","size":1034,"data":"","first_seen":"2026-08-18T13:42:56.829111Z","last_seen":"2026-08-18T14:03:53.608691Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef90426fbf3ad7739985fec809846d5d","sha1":"78a782ecce9b8d46c45926e1a2601318342f100e","sha256":"21011c7888dfc3f8de8181bfc2bca2877d0d7e82bf4df10c9ebd51ea4579af37","sha512":"0a67e9ed26d7005d3b68228b603ff1c2515bcc5ab86f9a80a1b1027844c64cc9ab46c4da0ab46dfaaf2b0bbc1a4c4c053a1bbb70eee7bcfaf6945dc8cb1fb09d","ssdeep":"","tlshash":"3e01c21a51b544b040abb33c9b6fa780223100c76408ae057e0e9f846f1863d1be0ade","size":721,"data":"","first_seen":"2026-06-07T23:37:29.55548Z","last_seen":"2026-08-18T14:05:37.231061Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/assets/CommonMethod.4f369f9f.js","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b072c8f74f1f04ab6c4f13cadd52449","sha1":"5e1552de5b541c47c647676ec2acd93c1c43dffe","sha256":"3f2974f6ca35fb5667b2e273d050e2e0f38b2231ed34450d452fc5dc7dcc3742","sha512":"021e5e2c6f59fde72bffc5d9ea49b346d78d5d65a069b1a2e0b3dd7a0f04103a8d0ca7efabf03b66f96f465de619f34b8aaeaa1b7866d57aa82f8fbcc6c6787c","ssdeep":"","tlshash":"4d11e3f5a1c6e7a6032c6949d038c062e36d999a2d104dacd0969c54e36a485f1ce616","size":866,"data":"","first_seen":"2026-08-18T13:42:56.81019Z","last_seen":"2026-08-18T14:03:53.590941Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/#/home","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-19T18:29:30.654503Z","times_seen":101005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/charting_library/charting_library.min.js","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-18T14:05:37.214182Z","times_seen":1368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"h5-api-cdas.top/api/common/getCoinList","fqdn":"h5-api-cdas.top","domain":"h5-api-cdas.top","tld":"top"},"ip":{"addr":"104.21.25.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:03.034Z","timestamp":1787061783034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5-api-cdas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 20:07:56 GMT","end":"Sun, 15 Nov 2026 21:05:21 GMT"},"fingerprint":{"sha1":"53:0A:5C:3C:1F:FE:BA:C9:7F:B9:05:D7:DA:F4:63:D8:24:3F:A0:9B","sha256":"A5:75:9F:7C:B8:F6:48:BA:DB:0E:1E:EE:EA:F8:A7:38:D7:CA:E1:05:1D:1D:F9:D7:1D:5B:F6:04:6D:44:AB:C9"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api-cdas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nOrigin: https://gyaj2o1.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:08 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gyaj2o1.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sg8nOyVpo10tZ5ftvFm%2FyThM8M4yh1MkyCTLrbNMdNCiAIJX0sQDUEUgB0ctvGzXVjj7CBwp0YLpreEFgt39E%2FScmIGnFGlkguyVGVQacMjD%2FDZ%2FMqFoaa9UBiRy5zufo7Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2d175b01bb8b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":905,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T18:44:56.31016Z","times_seen":17977523,"resource_available":true,"data":null}},"time_used":5823,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":5801,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/charting_library/charting_library.min.js","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:01.616Z","timestamp":1787061781616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gyaj2o1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 01:43:31 GMT","end":"Sat, 07 Nov 2026 02:40:04 GMT"},"fingerprint":{"sha1":"A4:0E:EC:D3:A6:1A:46:E7:4C:8C:C3:D4:BF:DF:2F:0B:D9:DF:96:6D","sha256":"5E:BB:99:34:98:4B:B4:FA:05:DB:88:FF:E7:62:86:34:D4:EF:FB:A9:9E:15:13:22:E8:AA:36:BD:E3:13:E4:8C"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: gyaj2o1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gyaj2o1.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 05:05:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a83e828-2a6a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1005\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VY2PzlkCXqIo8Ig5I7ZQDJOzw%2BGuHrjU9Gt8doVruEvIKz2Yirf4cW6Fpd%2F3VLz1%2F6J3ci69L3CE218iYH7LIufPvQU3%2BaYRcdgp7ELRPcq2yNRbxR31uoTxoFLS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d175a71b3b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":4198,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-18T14:05:37.214182Z","times_seen":1368,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"gyaj2o1.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/assets/index.b1bff472.css","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:03.027Z","timestamp":1787061783027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gyaj2o1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 01:43:31 GMT","end":"Sat, 07 Nov 2026 02:40:04 GMT"},"fingerprint":{"sha1":"A4:0E:EC:D3:A6:1A:46:E7:4C:8C:C3:D4:BF:DF:2F:0B:D9:DF:96:6D","sha256":"5E:BB:99:34:98:4B:B4:FA:05:DB:88:FF:E7:62:86:34:D4:EF:FB:A9:9E:15:13:22:E8:AA:36:BD:E3:13:E4:8C"}}},"request":{"raw":"GET /assets/index.b1bff472.css HTTP/1.1\r\nHost: gyaj2o1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Aug 2026 05:05:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a83e830-3a58\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1004\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xA9XP0POP%2FakkrVz9v6CY3Nj0xprNgydRQ5MPmrS6bO3TScYe5Tvx6HnOeVujvxF30PFKIkm7oxbFOIEdk9W3Kq7YzfTOAkMRzrY%2BuLWyFvZpgAS4VoCeEmE6Sal\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d175afebcb56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14936,"size_decoded":3579,"mime_type":"text/css","magic":"ASCII text, with very long lines (14935)","md5":"5196d294d54fd25c499c2c024085ad10","sha1":"d1726303bc90dc41249fccdc8468d02b9d428f1a","sha256":"b1bff472f8f83fc4ff6b34fbafe315c516f51d479df2166af05f1feb703c7ce2","sha512":"ec1c963fc21ddd97da7a8dd2752ea5f84f23a812e9ab77890d14834c19e3e8b163a5f1569004473d8d31666a5cc1467778bf134a05c82b5711ef2910cbbf4808","ssdeep":"192:91YxUXMuhTIwFEoF8rosbNThu1vwbW62lGvWlXaYZdzgDIsCbWa:9y9uhTIYxF+osxCQCf","tlshash":"c2625148b16d613ab837e4196c98978e3402ff5384076399dccaa97ecdc79f32728754","first_seen":"2025-08-29T09:33:23.961796Z","last_seen":"2026-08-18T14:03:53.588758Z","times_seen":14,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"gyaj2o1.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api-cdas.top/api/common/getMt5Amount?coin=xau","fqdn":"h5-api-cdas.top","domain":"h5-api-cdas.top","tld":"top"},"ip":{"addr":"104.21.25.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:10.572Z","timestamp":1787061790572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5-api-cdas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 20:07:56 GMT","end":"Sun, 15 Nov 2026 21:05:21 GMT"},"fingerprint":{"sha1":"53:0A:5C:3C:1F:FE:BA:C9:7F:B9:05:D7:DA:F4:63:D8:24:3F:A0:9B","sha256":"A5:75:9F:7C:B8:F6:48:BA:DB:0E:1E:EE:EA:F8:A7:38:D7:CA:E1:05:1D:1D:F9:D7:1D:5B:F6:04:6D:44:AB:C9"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api-cdas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nOrigin: https://gyaj2o1.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:12 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gyaj2o1.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wjgXPj2X3to%2FSvp5BaMT2G1Gr%2FkHr3wvwIBaCwPpkMvaOXHFKIarnfCeG2ESSl%2BZ6FGmCG2VeH7ela0JXhMTonqhWSUSCe6eVkMNdWzrsmZMBXaq%2F5btz7FaTB5D9d5cumE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2d175df0e90b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":905,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T18:44:56.31016Z","times_seen":17977523,"resource_available":true,"data":null}},"time_used":2169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/assets/index.fb9e0596.js","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:01.619Z","timestamp":1787061781619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gyaj2o1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 01:43:31 GMT","end":"Sat, 07 Nov 2026 02:40:04 GMT"},"fingerprint":{"sha1":"A4:0E:EC:D3:A6:1A:46:E7:4C:8C:C3:D4:BF:DF:2F:0B:D9:DF:96:6D","sha256":"5E:BB:99:34:98:4B:B4:FA:05:DB:88:FF:E7:62:86:34:D4:EF:FB:A9:9E:15:13:22:E8:AA:36:BD:E3:13:E4:8C"}}},"request":{"raw":"GET /assets/index.fb9e0596.js HTTP/1.1\r\nHost: gyaj2o1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 05:05:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a83e830-52865a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1005\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mP0WuVz6qNrLI9F4f%2FI31Hhnsht6fUg0fpk8Eb0vueSUhTJ%2Bh1bf1%2F1dlMGbGBlWZC0EWX8Jbm5wJ4Jl%2BSoP74%2BTJ62eqLOch80zQvgoJrkwhL5dvBumCU2C7ETW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d175a71b3c56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5408346,"size_decoded":3210342,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"62c0ac713b88fc3ff0b10a5a26eb497c","sha1":"62d757d02b9cf5ccb0ff207e12677b27b0a4993d","sha256":"f9922c2ddb048c56dc19b2ac0f8a326aa72e65354e54554f566ef0bca8a3ac42","sha512":"5843a173f62ef61f8756f32430916c4a06dfd0de3940139e4927b5d83212a02ce73ae01052f00e86c0301c034a1993f68cc434ca2ad7fbbde4025d89dacdf6cf","ssdeep":"24576:FeYC+n28/pHbyhkQE/ER/v/xOZB5reOUlFx:FeYC+n28/pHbisER/v/xmB5reOUlFx","tlshash":"652539a13554f42187fa88d640aa0505f33d1709b409c4e4f1beddae3a6bd44a2fbfb9","first_seen":"2026-07-07T13:51:54.926025Z","last_seen":"2026-08-18T14:03:53.589529Z","times_seen":11,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"gyaj2o1.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/assets/index.7a214f12.js","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:03.022Z","timestamp":1787061783022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gyaj2o1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 01:43:31 GMT","end":"Sat, 07 Nov 2026 02:40:04 GMT"},"fingerprint":{"sha1":"A4:0E:EC:D3:A6:1A:46:E7:4C:8C:C3:D4:BF:DF:2F:0B:D9:DF:96:6D","sha256":"5E:BB:99:34:98:4B:B4:FA:05:DB:88:FF:E7:62:86:34:D4:EF:FB:A9:9E:15:13:22:E8:AA:36:BD:E3:13:E4:8C"}}},"request":{"raw":"GET /assets/index.7a214f12.js HTTP/1.1\r\nHost: gyaj2o1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 05:05:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a83e830-6e65\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1004\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FBc%2B40xA21eez5ADuuYZoWTXg7a6VJdhqZ9NYypJGBtM8I%2BbndIAf907syyb0VKzyOBaduizvuGUmbErT2EFEEE4og4Xdkyw1CHAS5OdUQkZSL8HZGIK64IQC%2Bv5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d175afdbc856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28261,"size_decoded":8488,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (27881)","md5":"94f32afa2afdaac068f292998f8ed1bc","sha1":"b84de78e3261ff0cfcd5cb75af02b55395d7da28","sha256":"65e53345311e3233d9ba03f8f0fdc1d7a1e87bb213c227cf4c3b1ce62263848b","sha512":"c0e69244b09ff4f1c8a5dbe0e7f4d3bdbe6c282bd7e12603ab2b409468cf2fa040bcd6d0e727a00d2ee2dd665c7c2a5fabeb467011ce7a10ae13e043325efc85","ssdeep":"384:wa2ge6QrJP7mE2ELZfHOlr4tjBszO5ndX+VTiy41Oqodj5zTBC+CG:wOe6EJz1iqjBe6d+MdOqoR5t","tlshash":"bbc24065f92a9539f5fb4831205c24013148ffd6d2408913f2fc1e766b86ebd2b4eba6","first_seen":"2026-08-18T13:42:56.792116Z","last_seen":"2026-08-18T14:03:53.590162Z","times_seen":10,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"gyaj2o1.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/assets/CommonMethod.4f369f9f.js","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:03.023Z","timestamp":1787061783023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gyaj2o1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 01:43:31 GMT","end":"Sat, 07 Nov 2026 02:40:04 GMT"},"fingerprint":{"sha1":"A4:0E:EC:D3:A6:1A:46:E7:4C:8C:C3:D4:BF:DF:2F:0B:D9:DF:96:6D","sha256":"5E:BB:99:34:98:4B:B4:FA:05:DB:88:FF:E7:62:86:34:D4:EF:FB:A9:9E:15:13:22:E8:AA:36:BD:E3:13:E4:8C"}}},"request":{"raw":"GET /assets/CommonMethod.4f369f9f.js HTTP/1.1\r\nHost: gyaj2o1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:03 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\nlast-modified: Tue, 18 Aug 2026 05:05:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onN38hjtYh0x84DMPoYhgoH54%2BIckAk8R%2Fxxn1oXeXmgJIpnqdhp1vlypW64ZSXorwxg8zj%2BdQcn%2F%2FYB0IzJNCCPtVBKUxZvvSyTODJRXR28rL5pP5vvrhD%2FKWmL\"}]}\r\nage: 1004\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a83e830-362\"\r\ncf-ray: a2d175afebc956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":866,"size_decoded":1242,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (865)","md5":"4b072c8f74f1f04ab6c4f13cadd52449","sha1":"5e1552de5b541c47c647676ec2acd93c1c43dffe","sha256":"3f2974f6ca35fb5667b2e273d050e2e0f38b2231ed34450d452fc5dc7dcc3742","sha512":"021e5e2c6f59fde72bffc5d9ea49b346d78d5d65a069b1a2e0b3dd7a0f04103a8d0ca7efabf03b66f96f465de619f34b8aaeaa1b7866d57aa82f8fbcc6c6787c","ssdeep":"","tlshash":"4d11e3f5a1c6e7a6032c6949d038c062e36d999a2d104dacd0969c54e36a485f1ce616","first_seen":"2026-08-18T13:42:56.81019Z","last_seen":"2026-08-18T14:03:53.590941Z","times_seen":10,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"gyaj2o1.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/assets/index.0bb8dae7.css","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:01.622Z","timestamp":1787061781622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gyaj2o1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 01:43:31 GMT","end":"Sat, 07 Nov 2026 02:40:04 GMT"},"fingerprint":{"sha1":"A4:0E:EC:D3:A6:1A:46:E7:4C:8C:C3:D4:BF:DF:2F:0B:D9:DF:96:6D","sha256":"5E:BB:99:34:98:4B:B4:FA:05:DB:88:FF:E7:62:86:34:D4:EF:FB:A9:9E:15:13:22:E8:AA:36:BD:E3:13:E4:8C"}}},"request":{"raw":"GET /assets/index.0bb8dae7.css HTTP/1.1\r\nHost: gyaj2o1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Aug 2026 05:05:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a83e830-89a6c\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1005\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Z28fCSMycS1t%2FS2p29kNZwGRW4PyNuS2W8dEyGBFb3uhSxnQ7SXsCJmTjbShesUcph8pQa8Su1oasZTDRrvLCnqKj%2FvkPApr9Dtf7WfpVyrwR2%2FRTaDZzlR9mD5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d175a71b3d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563820,"size_decoded":124723,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"825fc303bff6638ba6ee9fe457127b88","sha1":"8ee84ffeb13b33831ae337bd4419b7af20b6b755","sha256":"0bb8dae77f244828ad9d72f7cea1d15f91d215a4935ccb33f3829623fecd275e","sha512":"0ba26eebbee6b65f90f2352fbb90f502c83e7647be75e280246478d14783ddd07866be2efd1c53192525e11621ae7e49db6c771d56d3e3e40d47a80729f0394b","ssdeep":"6144:WSI0MGuhT7M8EcH7pTVkad36fFhsSIcO3jVMa/4uta78+B36JL7u1A+wMif/x0rR:k4BAhhyP","tlshash":"8dc4d755e753513f2e17e63d6bc5d9d8bb28dea1dc12cba5f640a00849c3af102a3d2b","first_seen":"2026-07-07T13:51:54.93913Z","last_seen":"2026-08-18T14:03:53.5975Z","times_seen":11,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"gyaj2o1.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/platform/cryptoWorld/favicon.ico?2.0.1787000752136","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:02.610Z","timestamp":1787061782610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gyaj2o1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 01:43:31 GMT","end":"Sat, 07 Nov 2026 02:40:04 GMT"},"fingerprint":{"sha1":"A4:0E:EC:D3:A6:1A:46:E7:4C:8C:C3:D4:BF:DF:2F:0B:D9:DF:96:6D","sha256":"5E:BB:99:34:98:4B:B4:FA:05:DB:88:FF:E7:62:86:34:D4:EF:FB:A9:9E:15:13:22:E8:AA:36:BD:E3:13:E4:8C"}}},"request":{"raw":"GET /platform/cryptoWorld/favicon.ico?2.0.1787000752136 HTTP/1.1\r\nHost: gyaj2o1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:02 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 18 Aug 2026 05:05:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AoVVPfwf7r5aL7gemeWuIbqGos4U7LVSXbWFwACJTineC5sCeVOaJQy%2B2wCyKvmT32EPcSIchl8j%2BAO8TZTkl6K9j3iV%2Ffnt%2BfXFUvSFFE3e%2FhTzNwXDSUqyWhZM\"}]}\r\nage: 1002\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a83e828-10be\"\r\ncf-ray: a2d175ad4ba656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":2198,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"9984ad299a60ca6ba98536d2317136fd","sha1":"fc8b5608403c88d6966bb432ca3bab1c1693256d","sha256":"6286384a9212dfffcee16d533a7b27fab345f10bfa7e575c5c5f6d1553ef8b7b","sha512":"dc42c74f9e992bbce4c16b5531ee70b936afc4b3152c053dc8c59ab316a60f36a3195b1c18b963a530d16962f879079af9bdbed0378660d225b3c7d8171a3484","ssdeep":"48:FuVkJw5bImaDxvaPaOm6Yxx635fta1SSehzkQXncaaKtR3DplX:FuVkmsiPFh/9IAJbX","tlshash":"d3916853200c8160dac253f56b00ed7616cbde2871b9b34b16b2b05e1b7f2265977577","first_seen":"2025-09-18T04:26:47.633039Z","last_seen":"2026-08-18T14:03:53.59823Z","times_seen":12,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"gyaj2o1.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://h5-api-cdas.top/ws/769e62ab-2496-47af-a000-16ded73d4024","fqdn":"h5-api-cdas.top","domain":"h5-api-cdas.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:02.986Z","timestamp":1787061782986,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ws/769e62ab-2496-47af-a000-16ded73d4024 HTTP/1.1\r\nHost: h5-api-cdas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gyaj2o1.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: i7cDJoWhkXcuUetj7y4cUQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T18:44:56.31016Z","times_seen":17977523,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api-cdas.top/api/common/getMt5Amount?coin=xag","fqdn":"h5-api-cdas.top","domain":"h5-api-cdas.top","tld":"top"},"ip":{"addr":"104.21.25.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:10.576Z","timestamp":1787061790576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5-api-cdas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 20:07:56 GMT","end":"Sun, 15 Nov 2026 21:05:21 GMT"},"fingerprint":{"sha1":"53:0A:5C:3C:1F:FE:BA:C9:7F:B9:05:D7:DA:F4:63:D8:24:3F:A0:9B","sha256":"A5:75:9F:7C:B8:F6:48:BA:DB:0E:1E:EE:EA:F8:A7:38:D7:CA:E1:05:1D:1D:F9:D7:1D:5B:F6:04:6D:44:AB:C9"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api-cdas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nOrigin: https://gyaj2o1.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:12 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gyaj2o1.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WCy4hmwPP%2FP7VuAETD%2F4eHzS3UPDgxnnP5%2FsvrKPfo2z3pDkujicj9eyrHSS%2BC94I%2FOx8S8%2BaFM%2BHzGlkrPzeJiA6p4i%2FF9zF2ZAO4ZvpRVxBiUMBJ99l5h%2BmS5MWro1eCM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2d175df1e92b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":915,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T18:44:56.31016Z","times_seen":17977523,"resource_available":true,"data":null}},"time_used":2165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://h5-api-cdas.top/ws/425594c9-ee69-494d-a7be-3d325e79c243","fqdn":"h5-api-cdas.top","domain":"h5-api-cdas.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:22.988Z","timestamp":1787061802988,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ws/425594c9-ee69-494d-a7be-3d325e79c243 HTTP/1.1\r\nHost: h5-api-cdas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gyaj2o1.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 9BzQe3uKCYK6rfhITfLxGg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T18:44:56.31016Z","times_seen":17977523,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api-cdas.top/api/common/getAllSetting","fqdn":"h5-api-cdas.top","domain":"h5-api-cdas.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:03.035Z","timestamp":1787061783035,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5-api-cdas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 20:07:56 GMT","end":"Sun, 15 Nov 2026 21:05:21 GMT"},"fingerprint":{"sha1":"53:0A:5C:3C:1F:FE:BA:C9:7F:B9:05:D7:DA:F4:63:D8:24:3F:A0:9B","sha256":"A5:75:9F:7C:B8:F6:48:BA:DB:0E:1E:EE:EA:F8:A7:38:D7:CA:E1:05:1D:1D:F9:D7:1D:5B:F6:04:6D:44:AB:C9"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api-cdas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nOrigin: https://gyaj2o1.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T18:44:56.31016Z","times_seen":17977523,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T14:03:00.804Z","timestamp":1787061780804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gyaj2o1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 01:43:31 GMT","end":"Sat, 07 Nov 2026 02:40:04 GMT"},"fingerprint":{"sha1":"A4:0E:EC:D3:A6:1A:46:E7:4C:8C:C3:D4:BF:DF:2F:0B:D9:DF:96:6D","sha256":"5E:BB:99:34:98:4B:B4:FA:05:DB:88:FF:E7:62:86:34:D4:EF:FB:A9:9E:15:13:22:E8:AA:36:BD:E3:13:E4:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gyaj2o1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:01 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 18 Aug 2026 05:05:52 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OENFvYzHp6aIJHQxDElw1E9IDfUi2bINnDB3CCoBdhmCVWmz1BBWXgUI%2FLe8mOlKMZUTVVbeuI1O16VPGUAAfKuf4CO4n9nQHUNo3ulFQADwb1aIAhVMrEhfe%2BQF\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a2d175a23b0656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4264,"size_decoded":2233,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2150)","md5":"8f1d1b60edea77ccf97f5cd000692f42","sha1":"96dc54df6e0fe9b62de5342a2c6d759e3475319c","sha256":"7e80d1d0cf82df1b0c00dad93e40cf2838cf99f58a8ef2383e183434b18bda8e","sha512":"612126810edf34202cf847e6f197cd3e9058150d9438087b12a40b60ec948103905290a6175bd758cc4af994922ded046c2b55235096eba56303f827730eb89a","ssdeep":"96:9dzFuso/oaDVU6F/2EJ2mUsGKAiowGDKADq2Tu:bigaHL2nfD3bOAm2y","tlshash":"1091766608f8dc191362513dcfffb628a631505752164d203acd56989fd4fa884e3bad","first_seen":"2026-08-18T13:42:56.821579Z","last_seen":"2026-08-18T14:03:53.599069Z","times_seen":10,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":8,"connect":22,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"gyaj2o1.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/platform/cryptoWorld/logo_144.png?2.0.1787000752136","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:02.608Z","timestamp":1787061782608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gyaj2o1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 01:43:31 GMT","end":"Sat, 07 Nov 2026 02:40:04 GMT"},"fingerprint":{"sha1":"A4:0E:EC:D3:A6:1A:46:E7:4C:8C:C3:D4:BF:DF:2F:0B:D9:DF:96:6D","sha256":"5E:BB:99:34:98:4B:B4:FA:05:DB:88:FF:E7:62:86:34:D4:EF:FB:A9:9E:15:13:22:E8:AA:36:BD:E3:13:E4:8C"}}},"request":{"raw":"GET /platform/cryptoWorld/logo_144.png?2.0.1787000752136 HTTP/1.1\r\nHost: gyaj2o1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 18 Aug 2026 05:05:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a83e828-21d5\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1002\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQnHZZ1kqzZWkuvujl%2FwF1DmjcpojwNe5f%2F3mqG0i9%2Fb84X7BrS8k0B0nskURdhAWzmgFGz5ePFjN7sTzinvHr3zhd5lLNiP7%2BbgKBUysXZyZrXywl9%2FlHmJn2Jj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d175ad4ba456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8661,"size_decoded":9434,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"1e739152fd7a22b6942be519aa75ffb6","sha1":"83ada2ffe54db29983f522e80f8be0132ae682a2","sha256":"53a99c442cbf4409ccc92e7086736617c97f52d53280bd2eb60752709d75372d","sha512":"fa202790b86e7eff4711955e7a2702e348e73d361e5009b6bb2b325f10bf36e5713e3ed734d9e8ea94c6ea92d69c0ac771513fe0bece2c707801ed5252859666","ssdeep":"192:gANbMVeCGXx7fpfVhnFVa4uTDUPcE4WfPvFIlC2zt4L:gANbMVexDdnF+TDUPcEffPv64L","tlshash":"5a02afa1e34567edb70540b88bf2d37bc1319555009ed218c9d3bd50c3dabbba8a2b88","first_seen":"2025-09-18T04:26:47.601048Z","last_seen":"2026-08-18T14:03:53.599752Z","times_seen":12,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"gyaj2o1.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/platform/cryptoWorld/config.js?1787061782750","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:02.754Z","timestamp":1787061782754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gyaj2o1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 01:43:31 GMT","end":"Sat, 07 Nov 2026 02:40:04 GMT"},"fingerprint":{"sha1":"A4:0E:EC:D3:A6:1A:46:E7:4C:8C:C3:D4:BF:DF:2F:0B:D9:DF:96:6D","sha256":"5E:BB:99:34:98:4B:B4:FA:05:DB:88:FF:E7:62:86:34:D4:EF:FB:A9:9E:15:13:22:E8:AA:36:BD:E3:13:E4:8C"}}},"request":{"raw":"GET /platform/cryptoWorld/config.js?1787061782750 HTTP/1.1\r\nHost: gyaj2o1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:03 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 18 Aug 2026 05:05:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tWVUh22j3sPguceUJ6tY%2BOVHfVwFOOEkpiGg6A18BbRjnyvnq4yB01ZXRoFzgD2GLRPjCsrDf%2BewpTngLwXnxIANstfQ5Ud3%2BEgzl9KMBkbWhA1ePw3Clh271%2FIU\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a83e828-133\"\r\ncf-ray: a2d175ae3bb056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":307,"size_decoded":844,"mime_type":"application/javascript","magic":"ASCII text","md5":"44f557b7271ceeef03d7d710c7a5b342","sha1":"da8c78ec5d1c244463e6da08ece93bc0debbc7ed","sha256":"bd75ba8cdf89bbca0078c7a61f597259b89f13c3b158bb6af2ed69470324be22","sha512":"2f8dafecde6cded0bef7b6ab01148054dae46d5f72689156d755cb4d64d0d2ac99a27c3afc517899b829c28d86592c42b90d1a14e267bc3ee91962b307ed8787","ssdeep":"","tlshash":"e2e0c2fa26b699453c45512f59cc59327151827bccee761d788d9c006f9f90c1ab8532","first_seen":"2025-09-18T04:26:47.612956Z","last_seen":"2026-08-18T14:03:53.60195Z","times_seen":12,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"gyaj2o1.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/assets/core.esm.b4c18107.js","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:03.026Z","timestamp":1787061783026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gyaj2o1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 01:43:31 GMT","end":"Sat, 07 Nov 2026 02:40:04 GMT"},"fingerprint":{"sha1":"A4:0E:EC:D3:A6:1A:46:E7:4C:8C:C3:D4:BF:DF:2F:0B:D9:DF:96:6D","sha256":"5E:BB:99:34:98:4B:B4:FA:05:DB:88:FF:E7:62:86:34:D4:EF:FB:A9:9E:15:13:22:E8:AA:36:BD:E3:13:E4:8C"}}},"request":{"raw":"GET /assets/core.esm.b4c18107.js HTTP/1.1\r\nHost: gyaj2o1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 05:05:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a83e830-97f7\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1004\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Kw5VZGJXSusGGFn76io5x0QLa8m8rgIAcrC5zckZMgekUr7t%2BMHRXhc%2BK%2BqGCVw97dhV9lYvFgdM9CKGS%2B99I%2FFQyQqeI4nysdNg1UdNewSsnUCOTmYxTgKIA3V\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d175afebca56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38903,"size_decoded":12632,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38902)","md5":"1508b4e351620da41b4047bc89c4f517","sha1":"5588a0b17a3090b3209c06c1ff9cc7839b70a9f1","sha256":"62636c63dfe259c53f1de6672bbcae7eec6d2061ef091cc1ccd47b5950b71da3","sha512":"e3bff891dfc0e4dce1ecd06060912f33530b9608b9b8ce734c86dfbc8dd766e86d504fe9cc5d8a2f5093112ed1da05c4216c0e00f29fda3912010f6704cde23a","ssdeep":"384:/dZ5hHlVWIq0kQW+dsqUk9SC7EafwczhbFk562HAsLHD:FPVi0Ts3MzhbFkA2HAwD","tlshash":"e503d78bf620382003cfa2b5d35f2b095136554db10644fcb869dffa1db992d526bbb8","first_seen":"2025-08-29T09:33:23.921619Z","last_seen":"2026-08-18T14:03:53.602993Z","times_seen":13,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"gyaj2o1.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gyaj2o1.cc/resource/fonts/DINOT-Regular.ttf","fqdn":"gyaj2o1.cc","domain":"gyaj2o1.cc","tld":"cc"},"ip":{"addr":"172.67.169.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gyaj2o1.cc/","date":"2026-08-18T14:03:01.756Z","timestamp":1787061781756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gyaj2o1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 01:43:31 GMT","end":"Sat, 07 Nov 2026 02:40:04 GMT"},"fingerprint":{"sha1":"A4:0E:EC:D3:A6:1A:46:E7:4C:8C:C3:D4:BF:DF:2F:0B:D9:DF:96:6D","sha256":"5E:BB:99:34:98:4B:B4:FA:05:DB:88:FF:E7:62:86:34:D4:EF:FB:A9:9E:15:13:22:E8:AA:36:BD:E3:13:E4:8C"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: gyaj2o1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gyaj2o1.cc/assets/index.0bb8dae7.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 14:03:01 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 18 Aug 2026 05:05:44 GMT\r\netag: \"6a83e828-bceb8c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 1004\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WknxdZR4AHcapzS4Q81wwXO2VhQiNPaAAsXpH7mnYFN0t9f5azR3uy71j%2B9Z9rbRTLpbK2qGQ94wmxxtfqcu3Nk8iQ7r1xNizTbttnjxVMbv3SruARwtHgEJFUpe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2d175a7fb5256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12381068\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12381068,"size_decoded":12381821,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"BASE\", name offset 0xa88e6c","md5":"8c1c07fe2997321d54b049da39e880fa","sha1":"e85c69e54574d47b1a3b665a5f7c98ffeafcd371","sha256":"c6b6dd24e24ea6c07767f20fc1b2dfe86f31b1ca166ae620079c67dcdd5add6d","sha512":"192427288363eb352a702f85cbf2d714a78374d4583da9be541fdbcbbaf4e643103ded1b942d601838476029b05eb5b84d8b08998b546046255fa29670bf1127","ssdeep":"24576:H/8MftuDPIz9ZeJ199QETruMGR7JrhCannDH3l8cVZYIVY0:EituDduVjn7Zf","tlshash":"94257bc297c92d1eea22bd3c2440f63e70ce65088a56d6fade431f3718429741de9eb5","first_seen":"2025-07-29T21:26:30.315596Z","last_seen":"2026-08-18T14:05:37.209584Z","times_seen":111,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"gyaj2o1.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}