{"report_id":"2f2817f6-0888-40d3-96f8-a49dc9b60b6b","version":0,"status":"done","tags":[],"date":"2026-09-29T04:42:37Z","url":{"schema":"http","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":0,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"title":"BltG0","dom":{"size":103453,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1273)","md5":"d184d0f71dad240d23d136913c9a373b","sha1":"2acdc1299716be9ae6f439c0e0ee15c9a3fa757e","sha256":"c824555e2021624cd2c9e5dec64525dbc162773a8384e4a9044685f179431fa2","sha512":"77d61f2aeaf9b1ee92171b3a34508923189de23336763b8884421b4188edac0e9323fc8d565c1e5a2d420d883b4beaa296cdc58ef3326ec0aec399f8c6b1a054","ssdeep":"1536:TSdhd8jrJuEkOz4RkkPl16s0mDwhVH+7kyI0a3vhmeroTf/GyD:OhdkJuEwEh0yhm0Y/Gc","tlshash":"39a3f960e3ac0a3a215340cba7a572d675baa833e71bc4053ebf46545fc6c58d9336ec","dom_hash":"domhash074ab2278e95ca0cd54139b501ab5cbf","first_seen":"2026-09-29T04:43:08.047778Z","last_seen":"2026-09-29T04:43:08.047778Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":0,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T04:42:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dai56789.top","ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":89,"request_count":89,"received_data":2689265,"sent_data":52721,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-27T23:17:57.5349Z","alert_count":0,"request_count":3,"received_data":330362,"sent_data":1666,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.staticfile.org","ip":{"addr":"202.181.25.19","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2013-03-29","domain_rank":851278,"first_seen":"2013-08-23T08:51:19Z","last_seen":"2026-09-27T17:43:01.180981Z","alert_count":0,"request_count":2,"received_data":178548,"sent_data":945,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":1,"received_data":6147,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"abf6e4d01a14e25d6c838cc6afdc89e4","sha1":"bf1139f7986f61e21f46e5155a7b8986091b82ae","sha256":"427a206fb2fc84fd54fdc161de7a0bc168a163e23296813854b79fb1e529b59b","sha512":"fc766f7252ac987743f310eab2a232c0fa8074ae2ae6d6ed1a7813aff88298a004f712db27cf47b12fc21048a04a2eef7d4807d707cff8eb54a69dad035983cc","ssdeep":"","tlshash":"94310082c000082880a000380c82000020200000c00280200c0880e000280228002c08","size":1648,"data":"","first_seen":"2025-05-30T12:00:40.97637Z","last_seen":"2026-10-03T16:51:04.319213Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"4b1cad078820ad5d906951721298c639","sha1":"70733b25055feef1b3f8906d338583b951b6e5c3","sha256":"d36819234578e388bb9964e762a2aae243ebeba04070bcf89e5b60795f82ca48","sha512":"9eb4aabedac55265d70b51a66c74361c13aba6923911beb18e8de0b739a7f9f563635411d20d5c94300c0d3fe38d9691d5056c54dd0bfd292d34cc6bdf3d74bf","ssdeep":"","tlshash":"22310080c0000c208080003c2c80800020208200c2008000080282802ab80028000808","size":1656,"data":"","first_seen":"2026-08-03T02:44:22.729654Z","last_seen":"2026-10-03T16:51:04.312147Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"090d4d6e6e291b7d75550e206478b9b7","sha1":"692c3631017f921a424b8188f0eefb518ea80ad5","sha256":"3da6e3f44cd465a730f582e16578cd5ac19cdd1f62b0bf814aeba7a6d36a56d7","sha512":"85911fd4f4b1530a1e258dfc570a4fa33078093fe51b49a2a0391a26034649efd383cf3dc0ad0459bc57501e7401db9579b805808aeb20091c80bf76efb8619a","ssdeep":"","tlshash":"c63100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":1638,"data":"","first_seen":"2025-05-30T12:00:40.973791Z","last_seen":"2026-10-03T16:51:04.312598Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"de25c9e81800a80bcf34073ad000c51b","sha1":"6139203a3ef2d0917e2db6f8666f2a15b3772149","sha256":"57a0818cc7759ee101f925e49a7a6f31148f1f87f837676a5916052b982ab7cb","sha512":"5ffb66d9dc4095aea84832d4e006d1ff622a5d3dae57be02f1020e79a61b3bcf8f25f0e18c3b177c4232377a83a120716eaa0f3bb0c1833b223cea47123ea10c","ssdeep":"","tlshash":"33310080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":1634,"data":"","first_seen":"2025-05-30T12:00:40.965712Z","last_seen":"2026-10-03T16:51:04.311108Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/js/layer/layer.js","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-10-03T16:51:04.280996Z","times_seen":16901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-10-03T21:19:21.898677Z","times_seen":17494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"5f0be690874792383d5e1970cce7dff5","sha1":"043a7d5bdd8949f661da2cf611b9bb1d77394e57","sha256":"363184a916b6d616cbd70fa86d57c10e4540a8a8bae46c3bc5d45c0f906860de","sha512":"e53fc5040575014d489ea77da3510e2ef45883c46d8aa553c452164adbf68dc8efb87316c8cb8b2e3be06c6e81ded174070c702dae0f790c0f6635a62f048628","ssdeep":"","tlshash":"d13100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":1636,"data":"","first_seen":"2025-05-30T12:00:40.967622Z","last_seen":"2026-10-03T16:51:04.311581Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"cb42f968aff56cd4f189f36ba65507d5","sha1":"bcd78bccca154e2125dca42158f142a3ac1c58a1","sha256":"70b740408e929713408ad90092c12c0b604c6ec64996dad4f4289480f34f95e7","sha512":"11070f722d2c6ebaf9f15daf4be0265b26bacd775ced9e1dec1c22d123ba76a402682b85b324db65c6e203bd5007dfea25da8de935a7f2f4d3609ad8ef461da7","ssdeep":"","tlshash":"513100c0c0003c00c0c3003c0cf00000f0300000c030c0000c0cc0cc00ccc33c000c0c","size":1654,"data":"","first_seen":"2026-01-17T10:30:51.052423Z","last_seen":"2026-10-03T16:51:04.327259Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/2.1.1/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.19","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84280,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-10-03T20:41:52.1936Z","times_seen":12738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc68d138717a5e447ef6f1ad2045f273","sha1":"a9340026eaff2a4f3f2a7e2d232e1be7cdf05c49","sha256":"72b5bdd9e683786594eb35a018dc3976ad5fe67c2aa9a3ece1f8c6f295067fe5","sha512":"a4be5bfa4d88de93f073d550619b9787fc653d1e38bc62cc97ea3667166d5650c5cf4d30529dfd3536b4e3c36441618f9753fee36dbc28b6b1bc80488fd89381","ssdeep":"384:ubYpA2XqL6zny14eJzWhnuiDI7m42NGAhNmyIf6hsUo7ZLpv3qMqB1YTrNJSq+ou:uH+SgjkyIyhsz3vhQ1erOtKoTfom","tlshash":"efe22e92f73c9b760396015fb6cfa1e2e725a469222be90e385cc1181b95d3c87763f4","size":31182,"data":"","first_seen":"2026-08-03T02:44:22.716253Z","last_seen":"2026-10-03T16:51:04.313123Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d662dcb00abd93a4913f85b96d1a3069","sha1":"0fe96174f00f73f9e7080d86f981e7735633a3e9","sha256":"149b86462b959f162781ce52f39edc9c6d20129c891c377cbf01d94d01aba8ae","sha512":"172b8c91cdfe9bb8a0469e70f6e34c2b6560f7d8f2b519bf9bca522bc9973ea65ac18d93a0734283dcdcddd223a0b594307336626d0432800d90d88796f5a9e3","ssdeep":"192:x+9wKCCBm9wKCC1u9wKCCXO9wKCC9u9wKCCssxI9wKCC7O9wKCCeQi9wKCCTo9we:x+vm7uVOrur+JOAQihoTuhK5Mh8N","tlshash":"6522b46cf993286c789334258f6f005438e87547cb49d4193eada8c26f8850da5bbfde","size":10272,"data":"","first_seen":"2026-06-09T08:24:23.856239Z","last_seen":"2026-10-03T16:51:04.313658Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"63d88699b2021e3bc834c282c07f0457","sha1":"b5d0f47bf16e89014db3b294aeb7ca8ce8c0d994","sha256":"ce67eac94427a771aa83be4c27fbf9f5552c7885038cf8ad19f4232e2fa40bbf","sha512":"4df4eb2577d70cbf1b1964e21bb678eab8a734105f52689fb93dd816e624b75aaefe448bfff0bca13eb022c60192b749ba64ca2858e31dc856f2f5cb42aa12ef","ssdeep":"","tlshash":"cc116b05a70b2cd828f3996f1f1384120c3524136887ca243f4d97e09fe9e939469d5d","size":1076,"data":"","first_seen":"2026-06-09T19:00:24.191423Z","last_seen":"2026-10-03T16:51:04.314117Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9e951ccadec7053c28ad5a64f31d481","sha1":"13328ffc309fc222bd1e5009d029c2b2e6d55819","sha256":"521b2f7c72caa8b0063909fa695494538293dc98ef65e03f282c3e482aaf86c4","sha512":"0eafd63d06bbd402c5ad10ea1e15765b143c5b42407a32908e33f5e194e52ca446afc2194d4b4df6d66fd1016c834c642e3eecad144015ce44b25464ab13ab55","ssdeep":"","tlshash":"a1f0c96e0a1ed7ff709802355326a2ee30cd4baa90076407fe87021716ac018bc01ea1","size":522,"data":"","first_seen":"2026-06-09T08:24:23.860945Z","last_seen":"2026-10-03T16:51:04.314927Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6e7b7dca829109d95d7748e0da9cc7d","sha1":"d1f0a022363e8bcc37205501af183ab6c6da4b1b","sha256":"94dd2cb1c1e4d42e9f15f29dfd94c80f0494672fcc46623744df450b78776597","sha512":"71256b7934219e344b2745b1944a2824b3a09e4e21b500cbeb9c75873dd63636df97ec740ba9b587289506fb849f9ea0589385280256c2db905b8717a4e5ec62","ssdeep":"","tlshash":"f33133c4cb1e11acc84553f92a6e82dc063d2a702c338c657d199e38ac98ebed61dd79","size":1621,"data":"","first_seen":"2026-06-23T17:20:03.31614Z","last_seen":"2026-10-03T16:51:04.31584Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d81b64898b39258242f30c41c9fb0a79","sha1":"cd64752861eacd6b0da0b6b6dbecfb6e814c6b5d","sha256":"41948649bd03e708df4542d16bc8381f46cda35b078baad4519006d97f9f5943","sha512":"5933893140273761f1c99276e19e444bf85f5c9529d61b27fbd817d08fb459296c4b274bcbad8f61e9d9029ce2c2d450d366d6bc6e564cfe08aaf89a59baffbf","ssdeep":"","tlshash":"09d05ec39b4d1058587b319784eb15cc005c426288920d89bc3d91908ca01ec5371f2d","size":249,"data":"","first_seen":"2026-06-09T08:24:23.86383Z","last_seen":"2026-10-03T16:51:04.317096Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"188f14bfa28f19f560ef140d5703df81","sha1":"36306445ed268821de622e9dfcba07b4057414f9","sha256":"228e2e704dacf35fc8a99cabf586f657460eb53614fa0a98ce8e80a483a3f32d","sha512":"fde49fcd2692a27f47da7385c3bee6fd6c7b568a38fa7024c94b192037b67148a5220b87e6fcd400e113fb22a46186c603ae275e6af453522d46715cb6f31587","ssdeep":"","tlshash":"e53100e0c08e0c22808080380cb0000220208000c8c08000080080800008002800080c","size":1650,"data":"","first_seen":"2025-05-30T12:00:40.988725Z","last_seen":"2026-10-03T16:51:04.321268Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"85c29a0206c46298c469ed4333a0261b","sha1":"72e57d0ef3c04378d97d736c928da91da408f9d2","sha256":"f24b0aae274b84d0bf36ddbc9253e352c1b822c9e17d88342215be242ef1fd40","sha512":"2859e53f5d3b9cf9b3a0fb07201fa9391e688868fe3f95975a2de9626aee6a36405030125f8eca20093fe6291d79728ebac7cc33f7e4558ddad5224c22708dde","ssdeep":"","tlshash":"d0310088e0020820808000380c82000020200000c88080208802808000080028828808","size":1659,"data":"","first_seen":"2026-08-03T02:44:22.712825Z","last_seen":"2026-10-03T16:51:04.320742Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"5c56e6edfb19a73cf71505a20b783ff8","sha1":"cbb9cb5b093ecac3e79eb7fc8c1371851ce3dffe","sha256":"9530645dee8da47fb85b31b28f4bc8f4924bf76b2afc23baf438a58ce9a695ce","sha512":"1c270b34d524c4d0f74c2f9bb04279a0ae384a70a20b8aa819c90d33b8252c9201075c55390bf9b1a471256f0833a8efcb24806cbf311a2afdc3a131fa825d48","ssdeep":"","tlshash":"333100a0c8020c00808000380c80208020208000c00c800028e0a0a008882028200808","size":1666,"data":"","first_seen":"2026-08-10T18:19:32.315837Z","last_seen":"2026-09-29T04:49:02.931679Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"6f8fdab245574f0b607a5a63904dbd13","sha1":"134722a8e9d50b67eee4bad9ce57304c91817942","sha256":"9e6cd78bb13adab32198642b36c6e71277c9e79a4b405ed5a5c0aaabddbddc78","sha512":"f76c86f97d654f1c0ed6e67b0f116b97029444d47c756af7be23045e0d2bd3e6ad9c8aa1b5ddf665fbf03bcb7dbc8fdbe8af0ca2c1b39a0ce823e3f98ddb071d","ssdeep":"","tlshash":"72310080c8000c00808000b82c82003020202020c00080000800808022080028a0080a","size":1642,"data":"","first_seen":"2025-05-30T12:00:40.987142Z","last_seen":"2026-10-03T16:51:04.318419Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"606bb9fd830897bb3cb6d873be0c4d8e","sha1":"252d3bb69a2f15f7a0dba4225344ad366ac36fc3","sha256":"e24ec001c426216501c2ed5bb7f0549e6b45109dda7f0a2e951328ced8f79b18","sha512":"146bca2b1d8b9d77b7e719f1240d07b5777c494690e7913b09864dff281f28cccfba3944a3b026473bcfab2408289feed689d9aaa80b14b67f04357bb15df526","ssdeep":"","tlshash":"943100c0c0003c00c0c000fc0cc00000f0300000c0c0c0300c03c0c0c00c003c03cc0c","size":1644,"data":"","first_seen":"2025-05-30T12:00:40.984552Z","last_seen":"2026-10-03T16:51:04.327808Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"f0eacd2c7b49e0fba740776404c865af","sha1":"f52300b70a4897b2c13262b81d62db42e3e40581","sha256":"937a437830dd54238ce478ef67f66ed0ae3b81eb7a1c5dc750bc619e4b4c558d","sha512":"083ca1d030647e9bb1709eafdfa04d0b40b38d274611d2373c160c22c314c05dc0316d2df340ebbeb90d484b0deecf54c5e717b689cea253008abaa491d44981","ssdeep":"","tlshash":"723100c0c0000c00cccc003c0cc300003c3000c0c000c03c0c00c0f0000c003c030c0c","size":1661,"data":"","first_seen":"2026-08-10T18:19:32.3122Z","last_seen":"2026-09-29T04:49:02.932575Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.19","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93100,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-10-03T22:12:42.0646Z","times_seen":25367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"a3a81fb768c74e6351c8cfa243f1334f","sha1":"4d2df7ec092fd51299b6295b1e834782224d8ddf","sha256":"2b97191bb9cdbfbea6bacf606134afa35d884e4ac4a5f7166a190ce3cfb8b80a","sha512":"2ca04c16a5bbcf2d074fb0bcbf46b0b779c72fb3446145fcb99abea9b7d9aad37a5336cfee10fc13e797b59db4b8f56540daa64ed6d0f5f4e404461fb3ae0dbe","ssdeep":"","tlshash":"11310080c020cc00808000382cc2000220300000c00288300c008080000c823c0a8808","size":1641,"data":"","first_seen":"2025-05-30T12:00:40.982217Z","last_seen":"2026-10-03T16:51:04.319695Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","size":78748,"data":"","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-10-03T20:23:38.175173Z","times_seen":10490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Static/bootstrap5Slide/scripts.js","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","size":298,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-10-03T16:51:04.283456Z","times_seen":8598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"error","filename":"https://dai56789.top/","line_number":1570,"column_number":29},{"level":"log","text":"error","filename":"https://dai56789.top/","line_number":1592,"column_number":29},{"level":"log","text":"error","filename":"https://dai56789.top/","line_number":1394,"column_number":29},{"level":"log","text":"error","filename":"https://dai56789.top/","line_number":1394,"column_number":29},{"level":"log","text":"error","filename":"https://dai56789.top/","line_number":1394,"column_number":29},{"level":"log","text":"error","filename":"https://dai56789.top/","line_number":1394,"column_number":29},{"level":"log","text":"error","filename":"https://dai56789.top/","line_number":1570,"column_number":29},{"level":"log","text":"error","filename":"https://dai56789.top/","line_number":1592,"column_number":29},{"level":"log","text":"error","filename":"https://dai56789.top/","line_number":1394,"column_number":29}]},"http":[{"url":{"schema":"https","addr":"dai56789.top/xm/5f87397132a8b02.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.811Z","timestamp":1790656922811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /xm/5f87397132a8b02.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:17:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44fb0-998\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2456,"size_decoded":2943,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"bdaeb947a2eb31bae0a170559df9013c","sha1":"7fc8496c9bf51eea98dc9060262f87a792a24a43","sha256":"3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f","sha512":"710a1ac11f6fdb3915479bf6b9eccf34f4dedd8f30e6bed5275f52d1ec634a754b252e385eb9cd388a5a69c64aaf5818c13cb783090ae68a8696af067cb67341","ssdeep":"","tlshash":"9e512b90d3f3d98a7d930935f8b27a34cfda87da97098523ea834854e279442cd24943","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T21:18:42.136222Z","times_seen":20147,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:03.288Z","timestamp":1790656923288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"1a13c-GxDOCA4lYqi36DlQRNPKg9wRKZk\"\r\naccept-ranges: bytes\r\nage: 927503\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\nx-served-by: cache-fra-etou8220039-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 106812\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106812,"size_decoded":107552,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 106812, version 1.0","md5":"df7de9fe96a30f78c7f652f5b00ae016","sha1":"1b10ce080e2562a8b7e8395044d3ca83dc112999","sha256":"011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b","sha512":"d8cd580ed4119b0d31c9f3b7ea1b2002ccef31ba26cc6791114e5017e9ccffbfbf57b8611aafa52a8b3e76fc8f77b0d51d333dfcd5b293ddde61da3bbbbda47e","ssdeep":"1536:IEGBxy7wyLnYmvpdgacZtaiLBug50yslpdHfaKoGS3MUt7jCP/KgpL+HoEf7HhDt:0zy7pnYm/zcZta+UNoGS3gpL+Zwul","tlshash":"8fa302c0688d7e9ade37df31a226826373d3094a637c2d6f26997852c946e0f7637341","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.295146Z","times_seen":12987,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":27,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_eth","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:16.252Z","timestamp":1790656936252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":204,"size_decoded":708,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"153cc19c27c4a18bc7abe1ac58cbaa5d","sha1":"d4e7c268e48f0167b1e05bf58c42ec4d751b09a7","sha256":"5df92f68770425c0fddae9af0705305e59362fe27e990d4fc5e468868b3e5007","sha512":"f9c7679a73428c9f7cb4f11386d1efdec7ef1c89dd1c6c293d278e4da811ea01040db6b2c4a5b0cb0f671bec80e51d9ab9750a815dbbd7d0b93137aaab8aea00","ssdeep":"","tlshash":"d9d023d06f3c053d0c31e3d1a4d8575f784d4481c0c145051afe4d64509911c3325c26","first_seen":"2026-09-29T04:43:08.051298Z","last_seen":"2026-09-29T04:43:08.051298Z","times_seen":1,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_btc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:21.259Z","timestamp":1790656941259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0cf169c184c23df320adec7616c8a92","sha1":"e54c246af4fd06b154767497bcb335ba5443f300","sha256":"d3a3d30a1257d5617e6629c358fd2e4d118bb2bf1076cb3755c8a829e915a4a5","sha512":"692ef92f4d57898ecd4d666787c984d1bb8f8a94c3e3faaad2384e4cbb1475109e4337e91d4050fb13e8b712864b1c3697d9d126e782027ee48ea04c67d6be02","ssdeep":"","tlshash":"82d0a9c06f3a14662c2293e19dea171e948e4482c0c4821aaafd4ea8146c3083262c26","first_seen":"2026-09-29T04:43:08.052802Z","last_seen":"2026-09-29T04:43:08.052802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_fil","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:22.266Z","timestamp":1790656942266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_fil HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=fil"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201,"size_decoded":704,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ed454aadae1d38b3c36a2bca55912079","sha1":"cab1910b05d00bd1bb8d49d94ed57ac224d1b636","sha256":"395d5efc30be0d5c904530c1bb4166237d152d99fefc420a51e3ca19246e82f7","sha512":"dc7aecd4e62eb55fb92238cc809e21a0176bcabe123b5341fc33dba7fd1228566b6da15bbfe832b9dfd9adabcfa0f11f9d9a4d8479331302cd997e9e87f3e82f","ssdeep":"","tlshash":"6dd023806f3900360861e3c05cd5272d54ad0085c08143069ffe4bfc146d20c731fd36","first_seen":"2026-09-29T04:43:08.054007Z","last_seen":"2026-09-29T04:43:08.054007Z","times_seen":1,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_eos","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:32.252Z","timestamp":1790656952252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eos"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25,"size_decoded":576,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.254638Z","times_seen":360,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Static/bootstrap5Slide/scripts.js","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.793Z","timestamp":1790656922793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/scripts.js HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 298\r\nlast-modified: Sat, 11 Jun 2022 08:17:00 GMT\r\netag: \"62a44f7c-12a\"\r\nexpires: Tue, 29 Sep 2026 16:42:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":298,"size_decoded":817,"mime_type":"application/javascript","magic":"ASCII text","md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-10-03T16:51:04.283456Z","times_seen":8598,"resource_available":true,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/imgs/community_bg.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:03.272Z","timestamp":1790656923272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/imgs/community_bg.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-3c99c\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248220,"size_decoded":237304,"mime_type":"image/png","magic":"PNG image data, 2892 x 936, 8-bit/color RGBA, non-interlaced","md5":"3107a5d7de66ac526ba295a6ccb85e2f","sha1":"7ca2f1ffe3ed6dfd6260e8a47643d30d6223aeb9","sha256":"1021f5b23b901a121fcf0f78866fb66c978411d309aef421c54af4cb09ff1b6f","sha512":"262a6554428da7f2bffcc71915ee13f5e9a504a2e76af61499ba7ec68713fdbba8b2f52d9b6ff8a9b13ae649103c6aaeb2e89f0dcf5411ec636a7c6ca5c26f7d","ssdeep":"3072:2cI5zu8n4youkJkjKrt88rRhc0ZmoZ/UYO5+90yCOo9XHhNkHLfuZVrD0BMdJ2oo:2V5b4G0ks8ybkwT9vBo9R2iP30BPdb9","tlshash":"73341284fd1e6df6cdf40db008629f4c7935a6ad8835d713a3b6e15d9eb754008be680","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.293181Z","times_seen":7591,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/favicon.ico","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:07.246Z","timestamp":1790656927246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:07 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Sat, 29 Oct 2022 08:09:36 GMT\r\netag: \"635cdfc0-10be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4727,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"745f9a07d758f53a550dcafbee190841","sha1":"a91a6236e162189f91aa426d69515afddaf33503","sha256":"1ee19848d055fe11ee8df3a07cf3b8f94699afab0564858a5605833f6f3a6758","sha512":"5e7443da9d0490b1df450bb4e71f7c67566ef3ecd0cec859b974ea752ff7b544f65966f2342925376e79c922fa193a847a6c3b297c4a1ea59ee54e9f40911ed2","ssdeep":"48:1ssjc4eJrYD9DnB4TGf/1MarP1Mp6UbKCAF8ubl3fR86dWWi6q6l:FK8DZBSGqgPGU7zpEWBl","tlshash":"cb915362e2154b0ade3bca3a473fa7e9ba22fde6d24009c29144305e59753de0216799","first_seen":"2024-08-10T20:11:45Z","last_seen":"2026-10-03T16:51:04.264344Z","times_seen":144,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_jst","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:07.259Z","timestamp":1790656927259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_jst HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=jst"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205,"size_decoded":707,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"58852953e41bb683abea86d391115121","sha1":"77c3e617914a9353617f6935b0ad923de85c4e25","sha256":"f3360f7e5075cda2e27f09519087749ff475bd8557ea6fff5c259f469cedbee2","sha512":"adcbed0fd542fe6c13ee7d0bc61a95403b11faef89b86b2799ba2a1ce170eb8b35b1697842d3e59bb6f0cd0473c166c25d8ddf67a67f82625746a06fa4d0f0d9","ssdeep":"","tlshash":"83d023c03f3c08152861f3c054e9032ee4cf8445d08152891bfdcb7c501d0083321917","first_seen":"2026-09-29T04:43:08.058036Z","last_seen":"2026-09-29T04:43:08.058036Z","times_seen":1,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_eos","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:17.252Z","timestamp":1790656937252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eos"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":576,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.254638Z","times_seen":360,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_btc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:19.261Z","timestamp":1790656939261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0cf169c184c23df320adec7616c8a92","sha1":"e54c246af4fd06b154767497bcb335ba5443f300","sha256":"d3a3d30a1257d5617e6629c358fd2e4d118bb2bf1076cb3755c8a829e915a4a5","sha512":"692ef92f4d57898ecd4d666787c984d1bb8f8a94c3e3faaad2384e4cbb1475109e4337e91d4050fb13e8b712864b1c3697d9d126e782027ee48ea04c67d6be02","ssdeep":"","tlshash":"82d0a9c06f3a14662c2293e19dea171e948e4482c0c4821aaafd4ea8146c3083262c26","first_seen":"2026-09-29T04:43:08.052802Z","last_seen":"2026-09-29T04:43:08.052802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":398,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.790Z","timestamp":1790656922790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-2c9e\"\r\nexpires: Tue, 29 Sep 2026 16:42:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11422,"size_decoded":4230,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-10-03T21:19:21.898677Z","times_seen":17494,"resource_available":true,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/imgs/advantage_bg.a5d6d444.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:03.267Z","timestamp":1790656923267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_bg.a5d6d444.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-77e9\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30697,"size_decoded":30281,"mime_type":"image/png","magic":"PNG image data, 1392 x 1048, 8-bit colormap, non-interlaced","md5":"a5d6d444c8524a6d8e39fa1618582284","sha1":"4fda97683b94717d7597718b1e01c4a091f78ff2","sha256":"b2503b762cb8bf80f11571c1a10ac888258b78cc2a3a847780dfecef23dbb39b","sha512":"cfaf1fb56063ecbfc8d8a07ca56e6be8663b32188308ea349debd55b57e847c8005dbcbb1d72dfb8a7ca7873da81e44ed4b993345d673cf78bb3d3045f5cca11","ssdeep":"768:J1+dBPa7fkey90Yf5vWOjCuMg4+26RwDN1OvagerN6gA30Mh:3+dVa7fke7YlV14+d/vageR6gI","tlshash":"dad2e1dcf0f1d689567b11af43f47e48f5a5377e223344a05bade009a28095b3a7b41e","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.257704Z","times_seen":7871,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_eth","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:10.252Z","timestamp":1790656930252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":204,"size_decoded":708,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"153cc19c27c4a18bc7abe1ac58cbaa5d","sha1":"d4e7c268e48f0167b1e05bf58c42ec4d751b09a7","sha256":"5df92f68770425c0fddae9af0705305e59362fe27e990d4fc5e468868b3e5007","sha512":"f9c7679a73428c9f7cb4f11386d1efdec7ef1c89dd1c6c293d278e4da811ea01040db6b2c4a5b0cb0f671bec80e51d9ab9750a815dbbd7d0b93137aaab8aea00","ssdeep":"","tlshash":"d9d023d06f3c053d0c31e3d1a4d8575f784d4481c0c145051afe4d64509911c3325c26","first_seen":"2026-09-29T04:43:08.051298Z","last_seen":"2026-09-29T04:43:08.051298Z","times_seen":1,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_doge","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:14.255Z","timestamp":1790656934255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=doge"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"aeab5648bb72bbcd0f0e27d1055b171a","sha1":"1e27350bbc6dc5b357d7a6ffda7c96d6ccc7f193","sha256":"2e665cd6cf448b7c82afefd31330e1e25a02420609e94e217970c38918036b98","sha512":"97764e15e41b41773b31d9cfafb26825a4eb00cfaf792c5dc7a3515c703f215e044703215bf1a9887f337b7dec4147fae326d8202395c1df4a42f12d8aee1241","ssdeep":"","tlshash":"06d0a7d07e7905251d71f7e158d9271e788e808680c0570959ef4a78145831c2666821","first_seen":"2026-09-29T04:43:08.061064Z","last_seen":"2026-09-29T04:43:08.061064Z","times_seen":1,"resource_available":true,"data":null}},"time_used":356,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_ltc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:18.258Z","timestamp":1790656938258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ltc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=ltc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":199,"size_decoded":703,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a56f20afef406c7061d500e7948d316b","sha1":"3661b97d315600d8dc9c847191c3e31aecef8f96","sha256":"d384d0715443ff87c8f5d1e8b29ded7b00412318c5ade7e0c814a8131e3aed27","sha512":"b0cb6fd1fa99d1c06dfa1b7a6717026e87c4758531a27dd23cd88486e58e19db168dcb81e42536052f1b50bf824222212c2deb034b13c18ab9b910b27af34f33","ssdeep":"","tlshash":"d7d022c06f3c0a250c72d3d198ea274f514f5882a084820a1bfe8ef820a882c3232816","first_seen":"2026-09-29T04:43:08.062427Z","last_seen":"2026-09-29T04:43:08.062427Z","times_seen":1,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_eth","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:28.263Z","timestamp":1790656948263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205,"size_decoded":708,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fd4a2b6db33e9eb558d390c6679aceb7","sha1":"4c2a68acdeba1a4a7b62699325ba45edd2ae478c","sha256":"234cf6d4abd5f7e12feee1d9769276528229bac9e5d3e7e7649bffa0c5a763fa","sha512":"3b0f0be82e2641d511f27304491c35f0428a19c2b7b6975f15a75750c4bd7bbe506e3e52be181e83288c5b8fabc10c4cb16225a0836841842e5398ca30a9e21d","ssdeep":"","tlshash":"ead023d09f3805390c35d7d1b4d8175f784d40c3c0c145041afe4d64549910c3315c26","first_seen":"2026-09-29T04:43:08.06382Z","last_seen":"2026-09-29T04:43:08.06382Z","times_seen":1,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/js/layer/layer.js","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.788Z","timestamp":1790656922788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-4d83\"\r\nexpires: Tue, 29 Sep 2026 16:42:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19843,"size_decoded":7494,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-10-03T16:51:04.280996Z","times_seen":16901,"resource_available":true,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/imgs/android_down.d99dd6cc.svg","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:03.265Z","timestamp":1790656923265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/imgs/android_down.d99dd6cc.svg HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-2d6a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11626,"size_decoded":4788,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d99dd6cc9eeb67a17b5f64eee801202c","sha1":"6e11cb75b0529af92236763785b69749f62fee4d","sha256":"dc8a78d121b34f655fc063f43d4ef8cec3581d8539369f35f2ae0258a5735954","sha512":"fea5046497f492375a2bde60559ebfb91f67e52685d5b8055c2fd585809cfc98c3bf1a2bb0b20aa00e390c75533ba327d1b66194709fffe3c236fea363c0aed1","ssdeep":"192:Wt1zfau5v7dYMyr8R0tjFnR0tmWi2C/FNNW6xX8jVCZVzLQTsMH6IL:MzfhzS8+pn+mW4FNNFXZZJvw6IL","tlshash":"693255e793a4c0d0690fd5b5cd3b5ae43e1b70fbafc19058326dd944eb429d68b06e48","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.30977Z","times_seen":6561,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_fil","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:07.257Z","timestamp":1790656927257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_fil HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=fil"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":201,"size_decoded":704,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bd2b85235a801c9fda96c2990a1f36c7","sha1":"ac1b08464cb8cff91cf6b8fabc745bf6d6deb56f","sha256":"c1c91b98765fc2df297c63b260f24640a05af946cf40e136bec274250a729aa3","sha512":"4814bd7fd9512ee2f0f19396e8e4f1687bcb8de96235c919b258dd40238dd73a0fe25e701ab897d980da63b3288e021d24fde27f751279638c1d350dec00504d","ssdeep":"","tlshash":"7fd023c06f3900350822ebc06cd5273e546d0049c4404205dffd8b7c14ae20d731bd36","first_seen":"2026-09-29T04:43:08.066846Z","last_seen":"2026-09-29T04:43:08.066846Z","times_seen":1,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_btc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:15.260Z","timestamp":1790656935260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0cf169c184c23df320adec7616c8a92","sha1":"e54c246af4fd06b154767497bcb335ba5443f300","sha256":"d3a3d30a1257d5617e6629c358fd2e4d118bb2bf1076cb3755c8a829e915a4a5","sha512":"692ef92f4d57898ecd4d666787c984d1bb8f8a94c3e3faaad2384e4cbb1475109e4337e91d4050fb13e8b712864b1c3697d9d126e782027ee48ea04c67d6be02","ssdeep":"","tlshash":"82d0a9c06f3a14662c2293e19dea171e948e4482c0c4821aaafd4ea8146c3083262c26","first_seen":"2026-09-29T04:43:08.052802Z","last_seen":"2026-09-29T04:43:08.052802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_eth","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:19.254Z","timestamp":1790656939254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":205,"size_decoded":708,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2bb4bf064d3ba6133d2c7cb3578273cd","sha1":"de00be35925aeab4c04a0183ea08d75c2c7b7b8b","sha256":"cfcb3b4014674ec62990cd1923384de3094201406002414f629c57ec59399d61","sha512":"594ccafd4f38f89f344c5a89f31a47fb1e865d68100f489ca21470c24e05eb2cab3d1558c91b1c6cdf4059c61fcc6aa1d083882555fdbc16e84abceb72befad2","ssdeep":"","tlshash":"73d023e05f7805390c32d7d1a4d8175f788e4082c0c586445efe4d6854a950c3315c27","first_seen":"2026-09-29T04:43:08.06815Z","last_seen":"2026-09-29T04:43:08.06815Z","times_seen":1,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_jst","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:26.255Z","timestamp":1790656946255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_jst HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=jst"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82603039b8985822e8b3aeba670de7c4","sha1":"4894ca3665741a89620be6fdf18ae2c6294a667a","sha256":"9ec291edf4eb53bcb835fe3854c485646a879841ad47b4c4053bf9d818da6e26","sha512":"15e62873cf81d3c59bd5a7b1d110784ac2f0d0507710ef712bd3a2fe74e7c2a2b7393eb62ff4b5464244d62546441044dae6db5cc933357133ff29f00915eaf9","ssdeep":"","tlshash":"e4d022d03f7c00252c75f7c158ee032ee88e8482c0c2a24a1ffeca3c50291083322912","first_seen":"2026-09-29T04:43:08.06966Z","last_seen":"2026-09-29T04:43:08.06966Z","times_seen":1,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.792Z","timestamp":1790656922792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.bundle.min.js HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 11 Jun 2022 08:17:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7c-1339c\"\r\nexpires: Tue, 29 Sep 2026 16:42:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78748,"size_decoded":23223,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-10-03T20:23:38.175173Z","times_seen":10490,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/imgs/advantage_phone.511b5ee0.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:03.268Z","timestamp":1790656923268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone.511b5ee0.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-4ddc\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19932,"size_decoded":20264,"mime_type":"image/png","magic":"PNG image data, 500 x 1038, 8-bit colormap, non-interlaced","md5":"511b5ee00b739dea06dc9e55011afa57","sha1":"eb4ebfdfc46829471c2b86dc94b2e6bc83037fb3","sha256":"31b768d13aee263d4de7af1b5527bded34ad208284df0544dfe5fca9d00a41e0","sha512":"54e06fd802883d46f47e6f59f3d795d893ea797d8295c1cbb506b91a46d0d1efa79751a454049c3e6b2ac06dd5a312950658d96fa9f8c3cefd1d46f73e5ebda4","ssdeep":"384:/M6qoHUBFHYEFyqYA3ar7vWF6cCf9X+VFMsTB:vXHULHpFyRxc0X+Q0B","tlshash":"fc92d0c78eb6894efba7c47c81508bf2617a282190e61dd5fa61e3a3b432645db36071","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.271028Z","times_seen":7895,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_btc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:09.250Z","timestamp":1790656929250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0cf169c184c23df320adec7616c8a92","sha1":"e54c246af4fd06b154767497bcb335ba5443f300","sha256":"d3a3d30a1257d5617e6629c358fd2e4d118bb2bf1076cb3755c8a829e915a4a5","sha512":"692ef92f4d57898ecd4d666787c984d1bb8f8a94c3e3faaad2384e4cbb1475109e4337e91d4050fb13e8b712864b1c3697d9d126e782027ee48ea04c67d6be02","ssdeep":"","tlshash":"82d0a9c06f3a14662c2293e19dea171e948e4482c0c4821aaafd4ea8146c3083262c26","first_seen":"2026-09-29T04:43:08.052802Z","last_seen":"2026-09-29T04:43:08.052802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_eos","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:27.252Z","timestamp":1790656947252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eos"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25,"size_decoded":576,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.254638Z","times_seen":360,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_btc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:27.259Z","timestamp":1790656947259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0cf169c184c23df320adec7616c8a92","sha1":"e54c246af4fd06b154767497bcb335ba5443f300","sha256":"d3a3d30a1257d5617e6629c358fd2e4d118bb2bf1076cb3755c8a829e915a4a5","sha512":"692ef92f4d57898ecd4d666787c984d1bb8f8a94c3e3faaad2384e4cbb1475109e4337e91d4050fb13e8b712864b1c3697d9d126e782027ee48ea04c67d6be02","ssdeep":"","tlshash":"82d0a9c06f3a14662c2293e19dea171e948e4482c0c4821aaafd4ea8146c3083262c26","first_seen":"2026-09-29T04:43:08.052802Z","last_seen":"2026-09-29T04:43:08.052802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_eth","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:31.261Z","timestamp":1790656951261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205,"size_decoded":708,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fd4a2b6db33e9eb558d390c6679aceb7","sha1":"4c2a68acdeba1a4a7b62699325ba45edd2ae478c","sha256":"234cf6d4abd5f7e12feee1d9769276528229bac9e5d3e7e7649bffa0c5a763fa","sha512":"3b0f0be82e2641d511f27304491c35f0428a19c2b7b6975f15a75750c4bd7bbe506e3e52be181e83288c5b8fabc10c4cb16225a0836841842e5398ca30a9e21d","ssdeep":"","tlshash":"ead023d09f3805390c35d7d1b4d8175f784d40c3c0c145041afe4d64549910c3315c26","first_seen":"2026-09-29T04:43:08.06382Z","last_seen":"2026-09-29T04:43:08.06382Z","times_seen":1,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/2.1.1/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.19","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.789Z","timestamp":1790656922789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 06:50:43 GMT","end":"Wed, 09 Dec 2026 06:50:42 GMT"},"fingerprint":{"sha1":"91:43:80:63:EB:17:45:2C:C7:D5:2C:9F:C8:CB:8B:65:08:6A:C6:3E","sha256":"07:E3:FD:EC:42:7C:D5:63:54:E2:59:F0:D5:FF:06:44:04:0B:D0:71:E0:A3:CC:5C:CF:75:7F:43:BE:B6:38:81"}}},"request":{"raw":"GET /jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodifed-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode-007\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84280,"size_decoded":33779,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-10-03T20:41:52.1936Z","times_seen":12738,"resource_available":true,"data":null}},"time_used":1198,"timings":{"blocked":-1,"dns":493,"connect":224,"send":0,"wait":246,"receive":0,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/xm/5fc.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.810Z","timestamp":1790656922810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /xm/5fc.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44fb2-a86\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2694,"size_decoded":3189,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"6ad5509616a5fca9f389801052bea3fe","sha1":"5b53d204b7e6066409067fba9fce5202ff20e9d6","sha256":"6becc3abea448b67731610708852a70c3ceb99059b2dee98da3711dc0620218a","sha512":"18729e5d7521224c032a2a7f18c154b1d02905dda6a06dc3a1af5d876bc5f651b78699589772cd6158bc1bfa75aead83b084bca2b06539a3e4cc9b4a6d476ded","ssdeep":"","tlshash":"ed512be6a252222ac78335be8a25f1dbdf560afb123220858088c13aa40f750c98a573","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T21:18:42.084465Z","times_seen":22985,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_eth","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:13.253Z","timestamp":1790656933253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":204,"size_decoded":708,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"153cc19c27c4a18bc7abe1ac58cbaa5d","sha1":"d4e7c268e48f0167b1e05bf58c42ec4d751b09a7","sha256":"5df92f68770425c0fddae9af0705305e59362fe27e990d4fc5e468868b3e5007","sha512":"f9c7679a73428c9f7cb4f11386d1efdec7ef1c89dd1c6c293d278e4da811ea01040db6b2c4a5b0cb0f671bec80e51d9ab9750a815dbbd7d0b93137aaab8aea00","ssdeep":"","tlshash":"d9d023d06f3c053d0c31e3d1a4d8575f784d4481c0c145051afe4d64509911c3325c26","first_seen":"2026-09-29T04:43:08.051298Z","last_seen":"2026-09-29T04:43:08.051298Z","times_seen":1,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_iota","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:20.256Z","timestamp":1790656940256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_iota HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=iota"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":206,"size_decoded":707,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2a296ada366f22cd4c348bd7c0384764","sha1":"f5cc2bb5b5f2df15aa1ba68fc1ce3743fb3f8b0b","sha256":"4ba7e70062a27a2ff8eb897b4b593f441132e229e5053b430830fee391882c56","sha512":"eb394f07abcfd62db7faff88d3f31dfdcd1a545377e47a704d09b70971f641033a22586955445ee7b500e21b043a08883fca92272355393f4528a2c522b14096","ssdeep":"","tlshash":"0fd0a9e42e38000200a2afd1a8fc26bea49cc880c48053059beecb606958408b216d06","first_seen":"2026-09-29T04:43:08.073765Z","last_seen":"2026-09-29T04:43:08.073765Z","times_seen":1,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_eth","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:22.257Z","timestamp":1790656942257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205,"size_decoded":708,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"60d34ea352ee03417e932d1062305e64","sha1":"ccf425f63265bd8757c650ba2e35ec1a7c378c74","sha256":"ec3f83be31d8561e8d1559dd95f76660ac15baa72f9adaafde31cd0fd07945ca","sha512":"73d7102c0c4a8c694d43d156533656d05672bfdc878d11a321ffc13f81377933b95a0c82ea1177c611678698177bfd19ec441bb3ee8b551ac269d50b2be2ea03","ssdeep":"","tlshash":"4dd023d05f3805290c31d7d1f4d8175f788e4083c0c145045afe8d68549910c3325c27","first_seen":"2026-09-29T04:43:08.074959Z","last_seen":"2026-09-29T04:43:08.074959Z","times_seen":1,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Static/bootstrap5Slide/bootstrap.min.css","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.780Z","timestamp":1790656922780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.min.css HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Jun 2022 08:17:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7c-2f10e\"\r\nexpires: Tue, 29 Sep 2026 16:42:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":192782,"size_decoded":27524,"mime_type":"text/css","magic":"ASCII text, with very long lines (65184)","md5":"f90da32f1c1f746c2cd0f58d736b6959","sha1":"bbf9e498530c04f372a8378a2eeb14a39fc1f0dd","sha256":"420bc9f4ab4b731e3f8cbf7919fe0da12b758657df696855d6e97a841ee654db","sha512":"4dae3486758ef50a0625073424b44d662d6e8dae0cf3f11d5240795265cba345a92f1c22360c6e301ab5a80854525ca26b77a8c202842bc627d00e8d0d645c18","ssdeep":"1536:qQvFA+QbGwz48MIEtQ12c2Jsj+aaHYAVmJz600I40Yw:qQvqAVmJz600I40Yw","tlshash":"431492a7f581201ee493c10995d2bffd057f9586d3021baaf42737b44b452eb8a63e4c","first_seen":"2023-09-10T10:46:21Z","last_seen":"2026-10-03T16:51:04.291289Z","times_seen":1483,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/xm/1613786496962262.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.806Z","timestamp":1790656922806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /xm/1613786496962262.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44fb2-a83\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2691,"size_decoded":3167,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-10-03T21:18:42.005138Z","times_seen":34612,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/xm/1594057379245582.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.812Z","timestamp":1790656922812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /xm/1594057379245582.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:17:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44fb0-c13\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3091,"size_decoded":3555,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"033d340b5a4a22d8e8590b98409158f3","sha1":"098ef5ee4b44f780df7f39c022ea491cacb32e7f","sha256":"0b53847e742884cbfbc563109bb99cacbc75fbb1bca892a1dbf68982e68778a0","sha512":"60de2b9014037bbd2f081ffe295d2cd0d0772bfc9b878986404981aff8df34a51611ffe2d214e0ce8f3849f9f9bda9e52b650d50db089953fde9bbb5b9725339","ssdeep":"","tlshash":"03512bcb908c59b6afe24ea002945ce48021c177ad3b4726963ae91e9f742f6070dc62","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.298883Z","times_seen":5738,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/imgs/ios_down.e011cb37.svg","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:03.263Z","timestamp":1790656923263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/imgs/ios_down.e011cb37.svg HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-2edd\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11997,"size_decoded":4998,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e011cb37e1cdc749fa40e455f952c628","sha1":"c102a94a6beb0a26de83c2e21ab6ab409f265e88","sha256":"5b8c67057adbf739c8bbe363ef30d3e57638991690cd9930aa237e5b408849ac","sha512":"a92a160de1026815ca8078f6cc059fb8fba29284a5c792295a9755e8f6e3c10ae138c90b0cac9774f35cdf430106e4a7ccb5c88729e9750e867cf826479001fa","ssdeep":"192:sb39cIK/24cUfDfcFDOlozy6RWSmwQn0F3TRe3nclNXAJdlIPprWl:2mIK+OrcFKozy6RrIni+nKNXAXlI0l","tlshash":"9b3255f79354c0c4791e99e5cc3f1ae93a0ef0fb9a81a08832ade841e753ddd865ad44","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.308759Z","times_seen":6541,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/js/layer/layer.js","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:04.364Z","timestamp":1790656924364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-4d83\"\r\nexpires: Tue, 29 Sep 2026 16:42:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19843,"size_decoded":7494,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-10-03T16:51:04.280996Z","times_seen":16901,"resource_available":true,"data":null}},"time_used":2856,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2856,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_ltc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:07.253Z","timestamp":1790656927253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ltc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=ltc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":199,"size_decoded":704,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6ad1adb1abd768d47d9c25b394e65744","sha1":"20e135ab2dccfd31210e72df2961a501630d5d4d","sha256":"fd209499b895f2511b714e2542ea8a51100aab5bcf49fb64e221eadd064a8990","sha512":"de31a831f8f58fb19c2f310b65ad2c2901743ba07b6d0a7e7e1910814760281231e8f3296bd10889090b6c664eb2b772ab1a049e3e1c11afb67e56c0fe9b5c75","ssdeep":"","tlshash":"f4d022c06f3c0a250c71d3d098ea278e518f68828084820a5bfe8aa930a881c3232816","first_seen":"2026-09-29T04:43:08.080181Z","last_seen":"2026-09-29T04:43:08.080181Z","times_seen":1,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_itc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:07.260Z","timestamp":1790656927260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_itc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=itc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25,"size_decoded":576,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.254638Z","times_seen":360,"resource_available":true,"data":null}},"time_used":735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":735,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_doge","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:21.253Z","timestamp":1790656941253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=doge"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"aeab5648bb72bbcd0f0e27d1055b171a","sha1":"1e27350bbc6dc5b357d7a6ffda7c96d6ccc7f193","sha256":"2e665cd6cf448b7c82afefd31330e1e25a02420609e94e217970c38918036b98","sha512":"97764e15e41b41773b31d9cfafb26825a4eb00cfaf792c5dc7a3515c703f215e044703215bf1a9887f337b7dec4147fae326d8202395c1df4a42f12d8aee1241","ssdeep":"","tlshash":"06d0a7d07e7905251d71f7e158d9271e788e808680c0570959ef4a78145831c2666821","first_seen":"2026-09-29T04:43:08.061064Z","last_seen":"2026-09-29T04:43:08.061064Z","times_seen":1,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T04:42:01.224Z","timestamp":1790656921224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"f94h0rfvqj6usrl3jeojtukfe5","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100857,"size_decoded":20986,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1268), with CRLF, LF line terminators","md5":"7eff1c87dbfcbe864471e4af9f87559c","sha1":"9b0b0335a43982286d373738eccff8a4664cecc9","sha256":"8359b35f16805051995c001ac7262505986d9fce17778046cbf6041ec9a295f0","sha512":"32b0ad147bc73f496edd60f16fcfd18b6639125509de8d91bf0b8c37e8c9e02983c4a23d55352adf27c9c12dc635b6934ee4b4cb226fcf0a8c78556ccc080e7d","ssdeep":"1536:BgqS6ysWM+ocyqVeJDwhVH+7kyI0a3vhmeroTfLt423z:BggWM+ocyq2Eh0yhm0YLt423z","tlshash":"49a3d660b35c46392273418b97b56696fabad4339317c1053afc93722fb6c18d533ae8","first_seen":"2026-08-03T02:44:22.675018Z","last_seen":"2026-10-03T16:51:04.265015Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1151,"timings":{"blocked":-1,"dns":82,"connect":263,"send":0,"wait":534,"receive":0,"ssl":271},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"202.181.25.19","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.787Z","timestamp":1790656922787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 06:50:43 GMT","end":"Wed, 09 Dec 2026 06:50:42 GMT"},"fingerprint":{"sha1":"91:43:80:63:EB:17:45:2C:C7:D5:2C:9F:C8:CB:8B:65:08:6A:C6:3E","sha256":"07:E3:FD:EC:42:7C:D5:63:54:E2:59:F0:D5:FF:06:44:04:0B:D0:71:E0:A3:CC:5C:CF:75:7F:43:BE:B6:38:81"}}},"request":{"raw":"GET /jquery/1.10.2/jquery.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodifed-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode-007\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93100,"size_decoded":37445,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-10-03T22:12:42.0646Z","times_seen":25367,"resource_available":true,"data":null}},"time_used":1297,"timings":{"blocked":-1,"dns":495,"connect":226,"send":0,"wait":342,"receive":0,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Upload/public/629c72d72bea1.jpeg","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.803Z","timestamp":1790656922803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Upload/public/629c72d72bea1.jpeg HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Jun 2022 08:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44fb2-2044a\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":132170,"size_decoded":120558,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 750x300, components 3","md5":"dfde2097912178e1ade955a1479e4158","sha1":"2a46f5160255b5b99a32ffc7c0dbec89a2ff98dc","sha256":"09dce8313f5e10579c1f58032cc3397cb4b253cf9d4c8a0b858402cef5d397a0","sha512":"34b2608914c24f8754a8097b7cb752fa1960934c3be9270110cdc6d492ba99ddbf086d4c61c29789527849041d824979186f6e0af199f8efd181a22a11d2cb07","ssdeep":"3072:aJmM1CFqby70UZh28jBlZQZLoSMi60EL5+DuWXqT1mBkOZw0C1oPSnWnWnWnWGH:9MGw+FjBl6LoSMi/Ed+DuWXqTox5CSPb","tlshash":"8fd3f130ebcbdb061b9f446888fdac23076a19f811de90166f250df5f5cabb554424bd","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-10-03T16:51:04.307624Z","times_seen":6911,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/xm/1613786513998262.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.807Z","timestamp":1790656922807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /xm/1613786513998262.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44fb2-adc\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2780,"size_decoded":3287,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-10-03T21:18:42.056629Z","times_seen":26142,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/imgs/home_head_bg.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:03.249Z","timestamp":1790656923249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/imgs/home_head_bg.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-cf649\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":849481,"size_decoded":818099,"mime_type":"image/png","magic":"PNG image data, 4336 x 1428, 8-bit/color RGBA, non-interlaced","md5":"1cbfba6198f4e4ff700eb43de61092ac","sha1":"ff03b54f67e1a0ae20c274c3d06ee52c3dd6ee50","sha256":"618a8249a51b933013f55571d8cdcb16e26863c921c82170e79fcbcb582eea95","sha512":"cb12167584983054c4911ee8604171dc08c8f89fef64c97ef3eb8dca7f424ce7d34b87924419f0e76e7a4b23f231371bef37231639bbb36c71950fdebbae40cd","ssdeep":"24576:2nw3WzrNqGPQiPxmnC+YarisIgK+Xy/6Nn/WMISk:2n+iQGhPxmrY651qGn2","tlshash":"7405224ca0eef889cc125b351ddbcf8d52a430b498ef6719bb63bd20895d9cd6877620","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.259717Z","times_seen":6080,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":798,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/imgs/advantage_phone_ui2.03eb46c4.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:03.270Z","timestamp":1790656923270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone_ui2.03eb46c4.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-1fc3\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8131,"size_decoded":8570,"mime_type":"image/png","magic":"PNG image data, 620 x 414, 8-bit colormap, non-interlaced","md5":"03eb46c414ca4054d6aa8bcc6146e203","sha1":"1ad3fe2ee83e35506f404b3dc6110540539e32c6","sha256":"98f20bbbd1c55089292d663c5a641e6cb4d02e91149bd3b1dbfa3dc87168d1fd","sha512":"e59d6713424efe87e45984399aab1739b3b1ff7cde9fff91c83582110c669f9bf299ccb30a7286bec64c48243f887f701f27051f9e6e8b4445c9e927505db019","ssdeep":"192:vri1p22NLEFORfDwDmxiEVHkmrogfcftKLatznubkt:vriOMR8DmxiEVkafc4czuu","tlshash":"2ef1afc2d9d35ddf9d9c0b2b34cbf454844249d0eac68d05d74245a8f8be082abe3d9d","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.286159Z","times_seen":7938,"resource_available":false,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_bch","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:16.255Z","timestamp":1790656936255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_bch HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=bch"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":202,"size_decoded":706,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8d3632203f564d9ac3978f23fc737249","sha1":"2cec095bd33fd5faa2e641a0460f477c35981b3d","sha256":"12d8df64bee4e5ae260d265bca40e6b50b043b98aa37b84bcf0ed093c33c515f","sha512":"820784d66b24c127136da0bf504ef72771686525d41952a587a70a8b1e9e4e7a78235b7325479ed1a60dc6334a9d9ef4c26d0275106dbe83028dcf5f57774d22","ssdeep":"","tlshash":"a1d023d87f385c110c71dbd174f5171f648d04c1808041075afdce64143c61c3211c17","first_seen":"2026-09-29T04:43:08.085033Z","last_seen":"2026-09-29T04:43:08.085033Z","times_seen":1,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_btc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:17.257Z","timestamp":1790656937257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0cf169c184c23df320adec7616c8a92","sha1":"e54c246af4fd06b154767497bcb335ba5443f300","sha256":"d3a3d30a1257d5617e6629c358fd2e4d118bb2bf1076cb3755c8a829e915a4a5","sha512":"692ef92f4d57898ecd4d666787c984d1bb8f8a94c3e3faaad2384e4cbb1475109e4337e91d4050fb13e8b712864b1c3697d9d126e782027ee48ea04c67d6be02","ssdeep":"","tlshash":"82d0a9c06f3a14662c2293e19dea171e948e4482c0c4821aaafd4ea8146c3083262c26","first_seen":"2026-09-29T04:43:08.052802Z","last_seen":"2026-09-29T04:43:08.052802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Static/bootstrap5Slide/style.css","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.782Z","timestamp":1790656922782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/style.css HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 589\r\nlast-modified: Sat, 11 Jun 2022 08:17:00 GMT\r\netag: \"62a44f7c-24d\"\r\nexpires: Tue, 29 Sep 2026 16:42:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":589,"size_decoded":1094,"mime_type":"text/css","magic":"ASCII text, with very long lines (589), with no line terminators","md5":"df62cb99d119a66bcd5f06547d96ecb7","sha1":"a6d0e097db0919f47977c33510359bc08ec88a9c","sha256":"afca52e1c0203f27bf8165e8fcf92b2674f084f6372f12cc1e7bb3edaee35f03","sha512":"59d599c3a25a64cfae94e1b2f1328abffb199a503c0e8904a3e4a574c101cb6b72d09e94a7b2afaa3f8cbd1a55b92cb2b2bdc33b528ee6c953d30fa3b622cf0f","ssdeep":"","tlshash":"a2f07f42b71a596e5d872300a9d213abf10c7f319709097992f3211d8f29a85237df4e","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-10-03T16:51:04.288755Z","times_seen":8586,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/xm/jst.svg","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.815Z","timestamp":1790656922815,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /xm/jst.svg HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 11 Jun 2022 08:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44fb2-4b7b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19323,"size_decoded":6683,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b993b0a39d50c323edbb5886a19d56cb","sha1":"8e183944ff4dd3741c2b18f3a2d8962b1662b1a4","sha256":"450fcc35ab762f1b121f48150a7465b6a506fee918e24a80811134ee3a1d88c6","sha512":"754b0b31db60b3b2b0b2dcbc5f32e950bd8245c08d60d4d84a8bfd7a887167dd636d8f001232639952575ac6d2ac97103c66e04a016502472412283cffd680e6","ssdeep":"192:cu7OzkWdAPKtyK2Pe+6fsKO2uY/E4vVAAm7gbK1QQlS/exkPXGmZ7ayFePl5a0FJ:cuiz5dU7h2QuagXq36Np2aE/ao54Cgq","tlshash":"6a82238d9f564f6a9485b3fdafea5050648740ec39a8e2f4e7b44473f80c6a50c48de7","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.299374Z","times_seen":5588,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/imgs/icon_etf.svg","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.817Z","timestamp":1790656922817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_etf.svg HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-55f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1375,"size_decoded":885,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e432564e65f8779c665055d5bf9f563","sha1":"dc529670e33c8baace696f7ed4c3ef3bbe9cad90","sha256":"2df7417ef0acff023bffea1bf0c6366884770c1dab4d191f24ec29c84d2b7031","sha512":"cec79f984f55609c45347e0a6b9e885fec23baadfb00fca179eeed2b2902e5a8659649b6e4d7c0711a40bff90b8acfb7b8823a89beb53f9e836211ef89f17c3e","ssdeep":"","tlshash":"cf21e9fd204aaa29b35dc352ab2961f4184610fe1f35e4c1dbf855143c1cbfe495a1db","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.278416Z","times_seen":5027,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_iota","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:07.255Z","timestamp":1790656927255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_iota HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=iota"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":206,"size_decoded":707,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2a296ada366f22cd4c348bd7c0384764","sha1":"f5cc2bb5b5f2df15aa1ba68fc1ce3743fb3f8b0b","sha256":"4ba7e70062a27a2ff8eb897b4b593f441132e229e5053b430830fee391882c56","sha512":"eb394f07abcfd62db7faff88d3f31dfdcd1a545377e47a704d09b70971f641033a22586955445ee7b500e21b043a08883fca92272355393f4528a2c522b14096","ssdeep":"","tlshash":"0fd0a9e42e38000200a2afd1a8fc26bea49cc880c48053059beecb606958408b216d06","first_seen":"2026-09-29T04:43:08.073765Z","last_seen":"2026-09-29T04:43:08.073765Z","times_seen":1,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_btc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:25.262Z","timestamp":1790656945262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0cf169c184c23df320adec7616c8a92","sha1":"e54c246af4fd06b154767497bcb335ba5443f300","sha256":"d3a3d30a1257d5617e6629c358fd2e4d118bb2bf1076cb3755c8a829e915a4a5","sha512":"692ef92f4d57898ecd4d666787c984d1bb8f8a94c3e3faaad2384e4cbb1475109e4337e91d4050fb13e8b712864b1c3697d9d126e782027ee48ea04c67d6be02","ssdeep":"","tlshash":"82d0a9c06f3a14662c2293e19dea171e948e4482c0c4821aaafd4ea8146c3083262c26","first_seen":"2026-09-29T04:43:08.052802Z","last_seen":"2026-09-29T04:43:08.052802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":398,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_ltc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:29.261Z","timestamp":1790656949261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ltc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=ltc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":198,"size_decoded":703,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a97fec06a9b4d498ac93475969852b7a","sha1":"971de8701968907983d7eb500dc464606614004c","sha256":"75d4d41617d9b6285aa312ec2dafd8776386c3cd396c802cb7bfa29413ff5aac","sha512":"3dc214b47908e45dd82cb2feb5b20f1c974882a7b994f58917f86250eaf91611f717fe04e09558ea0201416abbd43abed40d377adc87e9db69813acf78595500","ssdeep":"","tlshash":"bcd022c42f3d0a250c71ebd098e92b2e984f0cc28080c31a1bfe8aa8101860c3232826","first_seen":"2026-09-29T04:43:08.087777Z","last_seen":"2026-09-29T04:43:08.087777Z","times_seen":1,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_ht","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:30.256Z","timestamp":1790656950256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ht HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 7\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":7,"data":"coin=ht"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25,"size_decoded":576,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.254638Z","times_seen":360,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Upload/public/68f2811ea035d.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.800Z","timestamp":1790656922800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Upload/public/68f2811ea035d.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 17 Oct 2025 17:47:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f2811e-1353f\"\r\nexpires: Thu, 29 Oct 2026 04:42:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79167,"size_decoded":79726,"mime_type":"image/png","magic":"PNG image data, 241 x 236, 8-bit/color RGBA, non-interlaced","md5":"7e092729747568eb29bf5a033313e4fb","sha1":"c3662d605ff616cd210aadd8aef0cf97498f5e88","sha256":"8225e898623123c489f46deef5d2f834138ce18d1ca3ba8ee02f060e7c8b704f","sha512":"58ade2e4167172a9e0689887310232bd17589e01fbb99f4f51c79cf57242d0fcbef34b046d86d5b9315fbd634aee37f2d28ff6ddf019303db65783ef702cf6c5","ssdeep":"1536:EDEq8Rgc2hGwgpkrdKv/EuY2sAlaHOokpp4xknu9w0IW/tcgGnpAaaTEdZ:EDd+KMpkroEYauokpZmw0IEGHpAandZ","tlshash":"8b731272d5df24f8c84ff5395a68806788b67c33e919eb2644d3b1b50fc6215c2b8a0e","first_seen":"2026-03-06T12:36:25.068669Z","last_seen":"2026-10-03T16:51:04.266098Z","times_seen":7,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/imgs/icon_margin.svg","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.816Z","timestamp":1790656922816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_margin.svg HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-654\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1620,"size_decoded":1225,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"283d6ddfb29042011328571a509df448","sha1":"3e486c50cfe119efc43c68ffafa349670c9f919c","sha256":"e88581cf4375fb6f9e7d94b4f9df4a667677d0d96384227c9a9228b1329f3308","sha512":"78e85634891dbc1423281f54e43c362b9cf8c75c83a070c34b36676b72b7b71e7793b2224c6d820eb870a0f7d854b336334b8ba0bca9125854139aaf2a97bc91","ssdeep":"","tlshash":"4e3120883a7ac39ce500e7ad981bb5ac3e1e04e96684c5d9c3e22c1078d2a59dc98dd7","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.270309Z","times_seen":5010,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/imgs/icon_contract.svg","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.817Z","timestamp":1790656922817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/imgs/icon_contract.svg HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-487\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1159,"size_decoded":925,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8be2edf2728aa394553b4fd9a44471f0","sha1":"1afec38a2c761fbd902e1de55d280424335aeeca","sha256":"306f962a6980e05ac92e3e8d3b1818e864f5557237541ab81cf2a15c44a190aa","sha512":"cd25567c0782132f9dcf858b252b11d1343a57a747b1bdbb7094b31baa1074528bc86fafeb66ac71997b4f4ae50e20c56373774f0f79fbf4b2ed339be8000ed4","ssdeep":"","tlshash":"b421ce69623543b9f04a82b212c9f47f353e06d8f1cb44c9e5671e20206e82ebca96c3","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.277824Z","times_seen":5031,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_btc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:11.254Z","timestamp":1790656931254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0cf169c184c23df320adec7616c8a92","sha1":"e54c246af4fd06b154767497bcb335ba5443f300","sha256":"d3a3d30a1257d5617e6629c358fd2e4d118bb2bf1076cb3755c8a829e915a4a5","sha512":"692ef92f4d57898ecd4d666787c984d1bb8f8a94c3e3faaad2384e4cbb1475109e4337e91d4050fb13e8b712864b1c3697d9d126e782027ee48ea04c67d6be02","ssdeep":"","tlshash":"82d0a9c06f3a14662c2293e19dea171e948e4482c0c4821aaafd4ea8146c3083262c26","first_seen":"2026-09-29T04:43:08.052802Z","last_seen":"2026-09-29T04:43:08.052802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_itc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:28.260Z","timestamp":1790656948260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_itc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=itc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25,"size_decoded":576,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.254638Z","times_seen":360,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_btc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:31.264Z","timestamp":1790656951264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0cf169c184c23df320adec7616c8a92","sha1":"e54c246af4fd06b154767497bcb335ba5443f300","sha256":"d3a3d30a1257d5617e6629c358fd2e4d118bb2bf1076cb3755c8a829e915a4a5","sha512":"692ef92f4d57898ecd4d666787c984d1bb8f8a94c3e3faaad2384e4cbb1475109e4337e91d4050fb13e8b712864b1c3697d9d126e782027ee48ea04c67d6be02","ssdeep":"","tlshash":"82d0a9c06f3a14662c2293e19dea171e948e4482c0c4821aaafd4ea8146c3083262c26","first_seen":"2026-09-29T04:43:08.052802Z","last_seen":"2026-09-29T04:43:08.052802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.773Z","timestamp":1790656922773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@4.5.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.5.0\r\nx-jsd-version-type: version\r\netag: W/\"27293-TxSgmmBsmaEfj9oVVk72b3BAKCY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 04:42:02 GMT\r\nage: 56756\r\nx-served-by: cache-fra-etou8220066-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24869\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160403,"size_decoded":25643,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-10-03T20:28:59.248773Z","times_seen":28983,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":2,"connect":26,"send":0,"wait":29,"receive":6,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/css/base.css","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.778Z","timestamp":1790656922778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/css/base.css HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-6332\"\r\nexpires: Tue, 29 Sep 2026 16:42:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25394,"size_decoded":6391,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (846)","md5":"7bfc7f3518042fcff5d50e0c4f9cad21","sha1":"2a2b5fcebcdb6fd84bbc9555017af9f23f63c2d3","sha256":"a0fa16f1aca23bff6b7805edc0f7f9e5738b84945247d9da6c9b1ece51cd60c2","sha512":"334184d060a412defa0168217ba6dc02078311f970dc3bc8f6f6ea339954721c436f37236b072e910e45a35c4843efb5130a5eaca922a16db5415a7adc348bce","ssdeep":"384:/HFiOTTjRmNi2RoLy6IbRiWc2FDwFxYorvRnEkEZ58s8BXR8G8LrB888t7jL5ZBb:U4cN39FDwFx9EZS9YzqtRB8TFI8dU","tlshash":"61b284a69fa30901b81bc5a41ff9ab15236dc017910bdebd7fc53648cf4b2d894a27c6","first_seen":"2023-09-10T10:46:21Z","last_seen":"2026-10-03T16:51:04.256541Z","times_seen":105,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/js/layer/skin/layer.css","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:04.357Z","timestamp":1790656924357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-36e0\"\r\nexpires: Tue, 29 Sep 2026 16:42:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14048,"size_decoded":3391,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"1673a003559ea1607dd77e6467a4baed","sha1":"954f4afa17e3d1c057101e62950f6c9506245550","sha256":"9748f440829e0b76d70f344e9c989f6d2302eba81aeea03211d40ef5f29fe62a","sha512":"5f9b8254fe18cdc329ca87a4852b7cb5520dcf3c406c5b3d755e99d0e7ddd618cd5ca2b455868ae14d896431cea2252b60d79d5fdd9e404a1fb8685a05ceb955","ssdeep":"192:9OcW0PmLeWVNrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijV1JbTyGY5CGX","tlshash":"1c5202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:37:37.344268Z","last_seen":"2026-10-03T16:51:04.263678Z","times_seen":5691,"resource_available":true,"data":null}},"time_used":2720,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2720,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_usdz","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:07.263Z","timestamp":1790656927263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_usdz HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=usdz"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":219,"size_decoded":708,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1f8551fe319d666b366d1c34166d412c","sha1":"343357ec908087649806630e256cd317bfc44481","sha256":"2d07b31aa0c24241261de33e22767d0680405fbd854208d363d1398f6a074475","sha512":"b7cf3e953012c133fedd6d8a2c6cb48666b2af8b8183737e58d10c1f23c177c2acb9c408a64ffa011675f8c42fdbb9a45819c27c2f2a0eab9738284518201d34","ssdeep":"","tlshash":"b5d0a7d02e34552190f3a7c174f923abe44cb845c0c0430597fec760296c0157329d16","first_seen":"2024-08-29T17:46:19.430936Z","last_seen":"2026-10-03T16:51:04.296248Z","times_seen":13,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":677,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/xm/fil.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.813Z","timestamp":1790656922813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /xm/fil.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:17:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44fb0-8bf\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2239,"size_decoded":2781,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"bc0baed91ad63da79ebfd092f42c76dd","sha1":"8a4f9cb9ee821242971e3f29a770e5078218bdf9","sha256":"ac4d8dcc1a755104c19551dcd96fbf097a93e529f86f540d8e0d55328c09a16d","sha512":"7cd155866ec8308b41049d32de0fa72b16dd774355f36ffba0f8256b1acaa2fe9fc5ae6695166f22c655aefe314b161d525f1cd8eb78ed746c3374905b0406bd","ssdeep":"","tlshash":"0e413eb67b9fc403c77f858708ed5e6544225f0a69248d50051a7e6ebd2f1e8c5915cc","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.263022Z","times_seen":5972,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/imgs/advantage_phone_ui1.7a062617.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:03.269Z","timestamp":1790656923269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/imgs/advantage_phone_ui1.7a062617.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/Public/Home/static/css/base.css\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-1fde\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8158,"size_decoded":8491,"mime_type":"image/png","magic":"PNG image data, 620 x 384, 8-bit colormap, non-interlaced","md5":"7a06261784d3908ab66f836816376de0","sha1":"3ea8a00b11b016e46703e0b873f005eb5e70adf3","sha256":"c6aa1f5b958419cbaa53682faf70d19d2737d2fc3ec58aeda3f83de3802ac4d0","sha512":"fd838b02e21d15d948d357fcea888bc7fe11bbe2d268d82f6b5f14341b2f253f5ffc6f8f34bac7beb7cead9c4780f6d4ee0b1e73db99ad3c681839965c886572","ssdeep":"192:RCD7357jDYAgAY0UKt/wetdU7BxeTKgPG2ZgwPhlTAAAAAI+GpYSTOFgWsh:RC3357ZXt67reegPG2ZvPDgGhCCWU","tlshash":"4df1ae00e21cefc3fdfce446b5a9916f24b44271323294ce50a39b65d8f459fa7966b0","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.300381Z","times_seen":7880,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_ht","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:07.261Z","timestamp":1790656927261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_ht HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 7\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":7,"data":"coin=ht"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25,"size_decoded":576,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.254638Z","times_seen":360,"resource_available":true,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_btc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:13.256Z","timestamp":1790656933256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0cf169c184c23df320adec7616c8a92","sha1":"e54c246af4fd06b154767497bcb335ba5443f300","sha256":"d3a3d30a1257d5617e6629c358fd2e4d118bb2bf1076cb3755c8a829e915a4a5","sha512":"692ef92f4d57898ecd4d666787c984d1bb8f8a94c3e3faaad2384e4cbb1475109e4337e91d4050fb13e8b712864b1c3697d9d126e782027ee48ea04c67d6be02","ssdeep":"","tlshash":"82d0a9c06f3a14662c2293e19dea171e948e4482c0c4821aaafd4ea8146c3083262c26","first_seen":"2026-09-29T04:43:08.052802Z","last_seen":"2026-09-29T04:43:08.052802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_bch","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:25.255Z","timestamp":1790656945255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_bch HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=bch"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":202,"size_decoded":706,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8d3632203f564d9ac3978f23fc737249","sha1":"2cec095bd33fd5faa2e641a0460f477c35981b3d","sha256":"12d8df64bee4e5ae260d265bca40e6b50b043b98aa37b84bcf0ed093c33c515f","sha512":"820784d66b24c127136da0bf504ef72771686525d41952a587a70a8b1e9e4e7a78235b7325479ed1a60dc6334a9d9ef4c26d0275106dbe83028dcf5f57774d22","ssdeep":"","tlshash":"a1d023d87f385c110c71dbd174f5171f648d04c1808041075afdce64143c61c3211c17","first_seen":"2026-09-29T04:43:08.085033Z","last_seen":"2026-09-29T04:43:08.085033Z","times_seen":1,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/imgs/hot-2.svg","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.801Z","timestamp":1790656922801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/imgs/hot-2.svg HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7a-1ade\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6878,"size_decoded":2235,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd9279cfb541640afabd1d33527f1df4","sha1":"6d828472cfaa863044b92e5c884ea8d658df4d36","sha256":"6466ed8936ba729058d7e2ae3bc93a7d8f3fb8ec385d7e3c29f21968cbd5aaef","sha512":"53a3ddf98f9ea97b18e73e5ca308a452a16142e672dcf3d1c86e61cc83e94729651eb41301bc902cc2510178e0c708fb5b66f3bf1e4ccde0fcf5f61aff77fcf5","ssdeep":"96:QRslJ3A7/H2wd9Qci3A7/H2wd9Qccra97a9tx+duKNBBbNwKDNlUs7vkSqD:QWS/Zd9z/Zd9ia97a9tKblLs","tlshash":"96e197f7e1b8b993d246c771ed52485528aa84fbeb810391c2e8ff9a6135cc04c4edd4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.302055Z","times_seen":7540,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Upload/public/629c72d268234.jpeg","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.803Z","timestamp":1790656922803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Upload/public/629c72d268234.jpeg HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Jun 2022 08:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44fb2-16932\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92466,"size_decoded":92464,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x300, components 3","md5":"d2ec614dd56337288a48c3504872d752","sha1":"1fa9772c7f2eb6e93fe1edeacef816b6850507fa","sha256":"d4ca7b176180c645d813c294b8174fe3c58a9cf83db951b5b8fb6f1ba9cb2cfd","sha512":"ffbee79889cffadad6106cf0535965fb5a5ce7e39b16a1998084d38aad60f4ecdb1ff0d2281fd34e999ccdd04c3d2cc25bd7aec119a58c18e5cd91b8174118a3","ssdeep":"1536:M9qKZoxlS00K5Xr6B7rdSKgWoCL8DyWKl7mfmxnyKqhvYPZmXxilegMMCdDIDG7:QZygKUFlgWnLV7ImxnV/P9C1r7","tlshash":"72931296b38a4919e7697732485ec1e073f29ea0be451fae51f3c478c8dd032b117a39","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-10-03T16:51:04.287406Z","times_seen":6878,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Upload/public/629c72e4af37b.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.805Z","timestamp":1790656922805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Upload/public/629c72e4af37b.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44fb2-68eea\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":429802,"size_decoded":430471,"mime_type":"image/png","magic":"PNG image data, 1140 x 465, 8-bit/color RGBA, non-interlaced","md5":"225ca6bb404d12e23b7b386fad845b9d","sha1":"5867c40e357d614354b83402482c4587ec910544","sha256":"670d66f9a6d3a2428280c04d570de82d99bd3c254888abafb92882cfae08ed44","sha512":"91cc1f7d6e940496ccd1d6285188e9b0c8150c39a24e724152ad53401be977259b6a8f66fc0d3e5cf17b19c31dad8370fb4d81d20f8b7b591da332aeff0790b8","ssdeep":"12288:JuQM20o9QXiA45lDD1mpVl09MrFrJVh+y5:t9lDJmnr5vhV","tlshash":"4d942395c5c6bc3391c6d10c9ab712b1b2239a7998af5bd506997e8c144cccac3fe24f","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-10-03T16:51:04.285347Z","times_seen":6885,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Home/static/imgs/tg.webp","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.818Z","timestamp":1790656922818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Home/static/imgs/tg.webp HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4944\r\nlast-modified: Sat, 11 Jun 2022 08:16:58 GMT\r\netag: \"62a44f7a-1350\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4944,"size_decoded":5383,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25709790dbdb2969c5827c0290589584","sha1":"d51c70a49478ec976a218dc730dbfb19476a9d79","sha256":"699d5e9257bcf16512e33439d676405ffeb48710c4851b86c9c3b9101172d511","sha512":"9e2387e1c92a0a8071260b1c3fa8d4a9b64ff33169bfa10eb197d5d3ce6b4e7bfb8f99d3693fab8f0278ee543edc7978874dd75e894b25d735d0d2e77f5a150c","ssdeep":"96:q11/q+jb2s095ANyq6CWer7WRTDt4n3MNE3O00EHH:UA+/2p5MIMWRTR43MNE3tn","tlshash":"1aa18f15183af26e88f9ed78406fa70235a3508d3b61f7d760e29e8436bd42a3b520f0","first_seen":"2023-09-10T10:46:22Z","last_seen":"2026-10-03T16:51:04.294554Z","times_seen":1795,"resource_available":false,"data":null}},"time_used":1974,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":1377,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:03.098Z","timestamp":1790656923098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 29 Sep 2026 04:42:03 GMT\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":1291,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"721a040ea564a6f1097d3c9fc78e4478","sha1":"969b3a763c65bbea8dd653387efe6482fd53f614","sha256":"1eab5e802b5f0457aaad88e630b825da8ed3ba340a35a34b5f6901d9d84bdad1","sha512":"44cce6feb92211ced4be081e6a2c9c0c63b0fc22a7243396544d0d88b4736d6e6d62ee3cad5136dda1b21e3f4eac55d6b465a0b28922df3565bc5bef366db625","ssdeep":"96:BOEabTxOEa7FZOOOEaKOEaQJc+uaOEaENqOxMabTxOxMa7FZOOOxMaKOxMaQJc+m:OH+yptkUkH0yXLkeLHbywkkdH","tlshash":"5eb17891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2025-09-17T11:57:27.939025Z","last_seen":"2026-10-03T16:51:04.299862Z","times_seen":4284,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":6,"connect":29,"send":0,"wait":46,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_doge","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:07.249Z","timestamp":1790656927249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=doge"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"aeab5648bb72bbcd0f0e27d1055b171a","sha1":"1e27350bbc6dc5b357d7a6ffda7c96d6ccc7f193","sha256":"2e665cd6cf448b7c82afefd31330e1e25a02420609e94e217970c38918036b98","sha512":"97764e15e41b41773b31d9cfafb26825a4eb00cfaf792c5dc7a3515c703f215e044703215bf1a9887f337b7dec4147fae326d8202395c1df4a42f12d8aee1241","ssdeep":"","tlshash":"06d0a7d07e7905251d71f7e158d9271e788e808680c0570959ef4a78145831c2666821","first_seen":"2026-09-29T04:43:08.061064Z","last_seen":"2026-09-29T04:43:08.061064Z","times_seen":1,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_eos","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:22.252Z","timestamp":1790656942252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eos"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25,"size_decoded":576,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.254638Z","times_seen":360,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_btc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:23.261Z","timestamp":1790656943261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0cf169c184c23df320adec7616c8a92","sha1":"e54c246af4fd06b154767497bcb335ba5443f300","sha256":"d3a3d30a1257d5617e6629c358fd2e4d118bb2bf1076cb3755c8a829e915a4a5","sha512":"692ef92f4d57898ecd4d666787c984d1bb8f8a94c3e3faaad2384e4cbb1475109e4337e91d4050fb13e8b712864b1c3697d9d126e782027ee48ea04c67d6be02","ssdeep":"","tlshash":"82d0a9c06f3a14662c2293e19dea171e948e4482c0c4821aaafd4ea8146c3083262c26","first_seen":"2026-09-29T04:43:08.052802Z","last_seen":"2026-09-29T04:43:08.052802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Upload/public/629c72dbe18e2.jpeg","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.804Z","timestamp":1790656922804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Upload/public/629c72dbe18e2.jpeg HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Jun 2022 08:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44fb2-219f6\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137718,"size_decoded":134042,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 750x300, components 3","md5":"96abd4588e557e6a37f5d3c213f0dd52","sha1":"6647c6a4e45c0963d31ed26ffd3fbf47d8891dc1","sha256":"62fca4cd746244e0a048bec7fe7d714efd224221851c3a91ffe8d1daee2bb8b3","sha512":"a7a2e192d4e25de386ba726c28b53c5321687450227e70fd77ee4a25fa26e8d52e5e8bbc81c18e33e85095fb3cdef51c8a0fcd3ca3b553e18d8bea383546f267","ssdeep":"3072:lFn4afMToBiTo/Nk/AU9MfbHpEbxsUNuJdL0:l2wBikAAUzVuJh0","tlshash":"5cd3f1a2ebfbeb2b4b5b56bc826dfd3b535019c828d69663185b0d12f908f31564703c","first_seen":"2023-05-21T16:18:43Z","last_seen":"2026-10-03T16:51:04.282401Z","times_seen":6890,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/xm/5f8738fd439bc57.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.808Z","timestamp":1790656922808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /xm/5f8738fd439bc57.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44fb2-9a9\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2473,"size_decoded":2844,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"430e14fa7ab62df82c9858bfa2682ece","sha1":"aa845a9abbffcbceee99934123b8e4e94b9ee52d","sha256":"20aa97f93b13e2de6de053d1d96a51ef8746a758973515f93b3f6e905c98f716","sha512":"bebb827e0a4525c0f7d3213a28fbde13be283e82d41ff86cfb216c98cdd5fa6515cd3403e2b0b2237635f46b0703c22359e797ca5bb0d3f660c4a1a287d600f5","ssdeep":"","tlshash":"f5511bd8fcdd3065d094b87b6b2121a25a831bc4f2807ae6f426c4495233c69076cfed","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-10-03T16:51:04.303494Z","times_seen":5039,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/xm/4558.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.814Z","timestamp":1790656922814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /xm/4558.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44fb2-48b0\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18608,"size_decoded":19047,"mime_type":"image/png","magic":"PNG image data, 200 x 199, 16-bit/color RGBA, non-interlaced","md5":"c7e59bbd0ca773c704b906e229ca8383","sha1":"e191e030bfffacaa1b53ea83121a03955fd080ba","sha256":"22e62f07c3d37c4e0b8f717bda7ac0c60362fb80380c9f6def693dd4f9b4567c","sha512":"69dfd5a8bec0c1533adde28c322e96dcf9236b934a21668bc435f55f3284258881937ff92573a64188b4cd3ccd52f6d485eb4d864d4da0806753c71e385212db","ssdeep":"384:KR6xVqHk99Lm0m9/zkJMPoqgN09WuJFNFHaV2zbj69VmO:tvQk99K0m9/zQLqGeDJ9HHzbjnO","tlshash":"d682e0a4850add63e0b15bb72bad2753cd3d3a2020d4b2b53ebb09b468f090657a4ec4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.310424Z","times_seen":5808,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_flow","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:07.258Z","timestamp":1790656927258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_flow HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=flow"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202,"size_decoded":701,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2beef0b9f220fc6f4bfc1d7da813d2a6","sha1":"8771642189024a7db764a8e637ddf35f625ed8d0","sha256":"600e446f679fccb4ca8883edfa2c7ad012c537e37918484893837e258d21f350","sha512":"49c01d5c316594a14fbeb19fa8732d55707bd0a794e3c7aea755cd6a2a5362ff0f570c0544fc1b03f74d135159dc055fb0c639742544118982598d5b5026d1d4","ssdeep":"","tlshash":"0ad023803f3d043d08a1fbc16ce9173d74dd4443c081560815ff4b7c155c10c3a15d22","first_seen":"2026-09-29T04:43:08.102075Z","last_seen":"2026-09-29T04:43:08.102075Z","times_seen":1,"resource_available":true,"data":null}},"time_used":853,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":853,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_eos","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:12.251Z","timestamp":1790656932251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eos HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eos"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25,"size_decoded":576,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.254638Z","times_seen":360,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_eth","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:25.260Z","timestamp":1790656945260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_eth HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=eth"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":205,"size_decoded":708,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fd4a2b6db33e9eb558d390c6679aceb7","sha1":"4c2a68acdeba1a4a7b62699325ba45edd2ae478c","sha256":"234cf6d4abd5f7e12feee1d9769276528229bac9e5d3e7e7649bffa0c5a763fa","sha512":"3b0f0be82e2641d511f27304491c35f0428a19c2b7b6975f15a75750c4bd7bbe506e3e52be181e83288c5b8fabc10c4cb16225a0836841842e5398ca30a9e21d","ssdeep":"","tlshash":"ead023d09f3805390c35d7d1b4d8175f784d40c3c0c145041afe4d64549910c3315c26","first_seen":"2026-09-29T04:43:08.06382Z","last_seen":"2026-09-29T04:43:08.06382Z","times_seen":1,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_btc","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:29.267Z","timestamp":1790656949267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_btc HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=btc"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0cf169c184c23df320adec7616c8a92","sha1":"e54c246af4fd06b154767497bcb335ba5443f300","sha256":"d3a3d30a1257d5617e6629c358fd2e4d118bb2bf1076cb3755c8a829e915a4a5","sha512":"692ef92f4d57898ecd4d666787c984d1bb8f8a94c3e3faaad2384e4cbb1475109e4337e91d4050fb13e8b712864b1c3697d9d126e782027ee48ea04c67d6be02","ssdeep":"","tlshash":"82d0a9c06f3a14662c2293e19dea171e948e4482c0c4821aaafd4ea8146c3083262c26","first_seen":"2026-09-29T04:43:08.052802Z","last_seen":"2026-09-29T04:43:08.052802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.776Z","timestamp":1790656922776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"edbb-Du3MPQ7GnRobCfGvnAP4Uqb5QVI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 04:42:02 GMT\r\nage: 2131018\r\nx-served-by: cache-fra-etou8220197-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 8018\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60859,"size_decoded":8792,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-10-03T16:51:04.301485Z","times_seen":17673,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":14,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Public/Static/qrcode/FanamLa.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.802Z","timestamp":1790656922802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /Public/Static/qrcode/FanamLa.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:17:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44f7c-7f87\"\r\nexpires: Thu, 29 Oct 2026 04:42:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32647,"size_decoded":30848,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"663b0c447697d27ec8856409f214b021","sha1":"8ea144fca3fb898c5f1a0d5c192084f46bb6c9c8","sha256":"5459d52c41be57926ab568e4d5e75d2f77d0d88739e1903884925ea178bb2ccb","sha512":"a0b604b05527127d0db4a9e89bf2bf3b9dd38574e5f50b33206570e01646c77d30711ee80b2ba0614c946595c5e0661f55fef48464a410677c819ed7ff4c33c5","ssdeep":"768:vM3rxJS1gfgBIa2hthzfVc2PztvWHMr5cR2a:e10nIXth5xyMdi2a","tlshash":"32e2e0f55c59a86d2d8444b00b685e75abfa80c21d8ae1dfec8013dffa260ef4be0565","first_seen":"2023-06-09T02:38:16Z","last_seen":"2026-10-03T16:51:04.304522Z","times_seen":482,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_bch","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:07.251Z","timestamp":1790656927251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_bch HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"coin=bch"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202,"size_decoded":707,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bd7d60e3e38ad653b2011da4f6c2bd5f","sha1":"7f7073dc96ebf04926c1172c1a166a51ef542489","sha256":"156baab0851ddf70b99e5c99f811f7dcb90d00ca36468175aacbbd72d80ecf8c","sha512":"233cbc5aa112d58b8caf19c0ad09414dea3cd8048eda8f72277d76d8be3aac4cb3acd53bc5543665430a164ef8df2d30ceb8e36795ff30110d4d2082650290aa","ssdeep":"","tlshash":"a6d022d46f386c150cb2d7d1b8e81b2fb89f00c68080c10b1afdcf68242d62c3226c2b","first_seen":"2026-09-29T04:43:08.105611Z","last_seen":"2026-09-29T04:43:08.105611Z","times_seen":1,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_flow","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:24.263Z","timestamp":1790656944263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_flow HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=flow"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":202,"size_decoded":701,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2beef0b9f220fc6f4bfc1d7da813d2a6","sha1":"8771642189024a7db764a8e637ddf35f625ed8d0","sha256":"600e446f679fccb4ca8883edfa2c7ad012c537e37918484893837e258d21f350","sha512":"49c01d5c316594a14fbeb19fa8732d55707bd0a794e3c7aea755cd6a2a5362ff0f570c0544fc1b03f74d135159dc055fb0c639742544118982598d5b5026d1d4","ssdeep":"","tlshash":"0ad023803f3d043d08a1fbc16ce9173d74dd4443c081560815ff4b7c155c10c3a15d22","first_seen":"2026-09-29T04:43:08.102075Z","last_seen":"2026-09-29T04:43:08.102075Z","times_seen":1,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_doge","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:28.254Z","timestamp":1790656948254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_doge HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=doge"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"aeab5648bb72bbcd0f0e27d1055b171a","sha1":"1e27350bbc6dc5b357d7a6ffda7c96d6ccc7f193","sha256":"2e665cd6cf448b7c82afefd31330e1e25a02420609e94e217970c38918036b98","sha512":"97764e15e41b41773b31d9cfafb26825a4eb00cfaf792c5dc7a3515c703f215e044703215bf1a9887f337b7dec4147fae326d8202395c1df4a42f12d8aee1241","ssdeep":"","tlshash":"06d0a7d07e7905251d71f7e158d9271e788e808680c0570959ef4a78145831c2666821","first_seen":"2026-09-29T04:43:08.061064Z","last_seen":"2026-09-29T04:43:08.061064Z","times_seen":1,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/Ajaxtrade/obtain_usdz","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:32.257Z","timestamp":1790656952257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"POST /Ajaxtrade/obtain_usdz HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://dai56789.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"coin=usdz"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219,"size_decoded":708,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1f8551fe319d666b366d1c34166d412c","sha1":"343357ec908087649806630e256cd317bfc44481","sha256":"2d07b31aa0c24241261de33e22767d0680405fbd854208d363d1398f6a074475","sha512":"b7cf3e953012c133fedd6d8a2c6cb48666b2af8b8183737e58d10c1f23c177c2acb9c408a64ffa011675f8c42fdbb9a45819c27c2f2a0eab9738284518201d34","ssdeep":"","tlshash":"b5d0a7d02e34552190f3a7c174f923abe44cb845c0c0430597fec760296c0157329d16","first_seen":"2024-08-29T17:46:19.430936Z","last_seen":"2026-10-03T16:51:04.296248Z","times_seen":13,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dai56789.top/xm/doge.png","fqdn":"dai56789.top","domain":"dai56789.top","tld":"top"},"ip":{"addr":"206.119.182.8","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dai56789.top/","date":"2026-09-29T04:42:02.809Z","timestamp":1790656922809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dai567.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 00:03:25 GMT","end":"Fri, 25 Dec 2026 00:03:24 GMT"},"fingerprint":{"sha1":"8A:E5:C3:24:34:F0:1D:CD:06:40:AD:11:A7:CC:37:7B:86:4B:E8:4E","sha256":"8A:6F:2E:C6:CD:07:F0:D9:F4:E5:42:06:3A:B1:35:7E:34:E0:63:BB:10:A7:3F:7B:99:30:1C:79:C9:CF:6E:21"}}},"request":{"raw":"GET /xm/doge.png HTTP/1.1\r\nHost: dai56789.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dai56789.top/\r\nCookie: PHPSESSID=f94h0rfvqj6usrl3jeojtukfe5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 04:42:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Jun 2022 08:17:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a44fb0-838\"\r\nexpires: Thu, 29 Oct 2026 04:42:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2104,"size_decoded":2644,"mime_type":"image/png","magic":"PNG image data, 61 x 60, 8-bit/color RGBA, non-interlaced","md5":"ff0c62c872d877837881793431cf064c","sha1":"8ee9cdfe43cfba24078529fa23984ab9e9d99a76","sha256":"c146f8822178b5581dd5eb80071e9824e1634252a4cd0d25b9675b0cb3da570e","sha512":"2416ae2389993012befe574c4ee91c47b6101f3e89b7582d25ce214e248e5305f327183c2a7222259b9aeae09ff7315edeae1ff11c8be3304ca11d5cefeb09ff","ssdeep":"","tlshash":"b0416e07f3ddbe79ccd66bb71348e024d01ff7e1b8010b98a42a4c565258c6f215c44b","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-03T16:51:04.269278Z","times_seen":7831,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"dai56789.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}