{"report_id":"4476d279-c6fd-43c5-b8f5-e2cfad287a56","version":6,"status":"done","tags":[],"date":"2026-04-06T12:45:54Z","url":{"schema":"http","addr":"web3xorqevin.top","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"172.67.181.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"web3xorqevin.top/#/login?redirect=%2Findex","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"title":"后台管理系统","dom":{"size":142727,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (53401)","md5":"da17d8543ac78d1c58058bb894ed17ed","sha1":"6b28c72fbb8dfe4ed5f8ef24caaf0de5efdefc09","sha256":"367e5fc8d63cf1f8435b9144cb65a85d665fc529386c9ae7f223244d77267424","sha512":"4cb23f9b62e229a0d4a477e136815373606dc19b3f36186f4d635897f69d4bff4328dfd939a69d365d27c1207c43bbd5bb0913e8db481be5a63fcd484badff97","ssdeep":"1536:wl4lmjhO+PeXbd9w7V8OBZSXgDPUCU1SSVXJnQv89Sf6dQGaNm2RZ7zDW44T4hNY:wl4lmFMsuXgDPUCe/8pb5Zp+pyFQ","tlshash":"ced34de8d320a3bc544fcb5ebb71b554291f10fb7ad18968f29c4e949bd3cc49906c8a","dom_hash":"domhasha88a2ac1b027d81045c0808fa05ca0b9","first_seen":"2026-04-06T12:46:11.729211Z","last_seen":"2026-04-06T12:46:11.729211Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"web3xorqevin.top","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"172.67.181.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-11T12:45:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"web3xorqevin.top","ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-04","domain_rank":0,"first_seen":"2026-04-06T12:45:57.432816Z","last_seen":"2026-04-06T12:45:57.432816Z","alert_count":20,"request_count":10,"received_data":5132113,"sent_data":4650,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"web3xorqevin.top/static/js/chunk-elementUI.d9951610.js","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"880e93a61262058bfa711d3c42686529","sha1":"68a826adb709c9cf8682873e014d82e89a40af04","sha256":"c7ca89025efe0772d2ba62d3a45b069bd7480e04e7a7786ec5c442f06efafaa9","sha512":"3da5c396855bb5f7e5f2f8b5e9b90f1f0efcc5395d93aa2507cd8998d4420300a6025ab66e04493de376c40cc5b16b0f674359be6aaba6112bf32a1aa13d4328","ssdeep":"6144:vjGvrwGAJWr3L31Y0XS5Q58mUD58URcFRrTLvo8CswI/U9+ddVdDRA//:vV87L31Y0O2458U67LU9+ddDRAX","tlshash":"14f4098d72c5f57147a360b0102f210bf33b2aac6809809cb675e9d96d7d909a26ff7d","size":773807,"data":"","first_seen":"2023-08-04T09:51:30Z","last_seen":"2026-07-23T16:30:24.609191Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3xorqevin.top/static/js/app.4161f362.js","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e81c1c0623084b2165c82737b83153f","sha1":"19237dceb94553dc86cdcf01c7986d32a77a01ad","sha256":"03c3bb1375d0a76c529bcfb7bfd3e29bdce04b4327298ce4f8fede1d66682113","sha512":"c19d8baecd207371ff3b912063e60f7e408959067002064da05eddf8b515afcc248623dc7ac4b17e641bdf05d3db9c1dff947fe081ce543d4d21b4b8ff053fcb","ssdeep":"3072:8wOWURIL817ABnIgMR2Zodb6pPSgNQigDPUCXVzDdN8w6nQGxyqBY:8wOWUiLERndbjgNwzDIxi","tlshash":"9994299df2c4f1ec068b52b5503f2009633b38bd658a6891e7b5cdd49eb589c2213fad","size":408386,"data":"","first_seen":"2026-04-06T12:46:11.73493Z","last_seen":"2026-04-06T13:06:56.704237Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3xorqevin.top/static/js/chunk-libs.d636db70.js","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f0a23079d5ec046898d039a9d1f234b","sha1":"f430ae2867b7fd01b57b6b3c3b75838441668d1d","sha256":"b985f760ef4cb45c263d1904e197a478b4548a368b5591f263047f848b54f577","sha512":"76702d9ffffc1fdcc1493efe6e1880d54473b60a16129a7e1e5bfc28906a9d2275f1c5c268dfba1a7af8fe7ea46e0f4ff30014f990351deeb440a8cc0f396a60","ssdeep":"24576:nO6DF69yHUhICwXRqlCXDjkD6MspOQi7aZrH7:OmF69yHUhIbXRqkXD4D6kQi7aZrH7","tlshash":"aa85099cb295b07143a761b5406f150ff336681db40a85a8fa65e8e96cbc44f623bf3c","size":1841699,"data":"","first_seen":"2026-04-06T12:46:11.758049Z","last_seen":"2026-07-08T10:13:16.471679Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3xorqevin.top/","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c45093b53c14a29a1faa3c585ecaeb9","sha1":"3777dd04a0ae6e853b47d583eb64ed859190223e","sha256":"572ed9b9fcfba1db86e5fd24dd586812d05c7f4313035e76b9fa8de0dd97a563","sha512":"27b9bc83cde0ceb144c975142f2262da170274a1449d097687a88387b5cdb90fd107d594414c7acfbb4bc22871b34c2cd64f21bd8cbc83818a73f01f1c809d06","ssdeep":"192:0PGOcboGMTFE5CB3ahVYakqt8seWUEJpeg2FMCFZuWjKdRX5VmfpK2L:qsTMTNZaI+peg2HF4W+dRXDmf5L","tlshash":"19328376d384f5798b969c17261aff2345a729733831a37843ace3a0a3906f5130b94f","size":11778,"data":"","first_seen":"2026-04-06T12:46:11.761142Z","last_seen":"2026-04-06T13:06:56.71241Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"web3xorqevin.top/static/css/app.307d9cb2.css","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web3xorqevin.top/","date":"2026-04-06T12:45:19.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3xorqevin.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 12:45:19 GMT","end":"Fri, 03 Jul 2026 12:45:18 GMT"},"fingerprint":{"sha1":"91:1F:CB:BB:EB:20:A5:9D:C6:4B:49:21:38:FE:BF:75:8D:05:5F:AA","sha256":"BC:A6:EB:BF:1C:24:EE:50:89:96:1A:C9:82:EB:46:55:BC:E1:63:20:F4:A9:8E:8F:7E:5A:84:85:BA:04:A7:FF"}}},"request":{"raw":"GET /static/css/app.307d9cb2.css HTTP/1.1\r\nHost: web3xorqevin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web3xorqevin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 12:45:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Apr 2026 14:17:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d11d88-45223\"\r\nexpires: Tue, 07 Apr 2026 00:45:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LK9bA2%2B17E7zYT2DUsAEuF9MvblhGZw5%2Fjs%2BoFEBH%2FSfzcJoX%2BIluagF5agfHfjNIR%2BWrZirB%2Fi8Ofd3wloD2FUfSRFH38cs8PQWtTcFO68I%2FMsZYfZx9sjzMoiSCy9QpdpJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80e39449867130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":283171,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (64974), with no line terminators","md5":"6946bd21bce49ebca7d65bdd05f5c1ee","sha1":"91697f7d9921097f476ecaaccfe42db55d5b4f34","sha256":"63a10fc18e543ab9892fea87d864c75cfc116ef183b42f97390d6668f2b69149","sha512":"187dfb8e7c8d93fe9cbf4a538caae1f26249cc51bdd469ea864678d926901df5bf61e2c602730e4796249bf8d560273e013b1269a94a9131b3d3c16f35ea0cf0","ssdeep":"1536:ravyngEUt6f49+89+hoz4bv5yqm2gW9cMEutb7OOHiZkW1Yu8e+3SNZ5fhIcau9S:BRKwtmnfUubtLSzTfCq","tlshash":"c254a7219b572127612bda6d76c07a896f28c323e4225fbbfe51780dc7d35891263b0f","first_seen":"2026-04-06T12:46:11.731991Z","last_seen":"2026-07-08T10:13:16.448178Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1148,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3xorqevin.top/static/js/chunk-libs.d636db70.js","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3xorqevin.top/","date":"2026-04-06T12:45:19.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3xorqevin.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 12:45:19 GMT","end":"Fri, 03 Jul 2026 12:45:18 GMT"},"fingerprint":{"sha1":"91:1F:CB:BB:EB:20:A5:9D:C6:4B:49:21:38:FE:BF:75:8D:05:5F:AA","sha256":"BC:A6:EB:BF:1C:24:EE:50:89:96:1A:C9:82:EB:46:55:BC:E1:63:20:F4:A9:8E:8F:7E:5A:84:85:BA:04:A7:FF"}}},"request":{"raw":"GET /static/js/chunk-libs.d636db70.js HTTP/1.1\r\nHost: web3xorqevin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web3xorqevin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 12:45:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Apr 2026 14:17:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d11d88-1c1a23\"\r\nexpires: Tue, 07 Apr 2026 00:45:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O4%2Bsu6vjSK4OmNeEhoqSTPSqu100h%2BSuHa368cUkVrSC1XrIVTWtvdfgYfH0NAJYY0LgqZ0uVxR1i5aOdVWqb3ftCb89OWCKq5spYMGvrFqyeAjRdTd6GB%2BMtOpgXIFlvd6%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80e39449887130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1841699,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35967)","md5":"3048932ab87440168433cc14bf339e1e","sha1":"60214a57fda3c9878f4453f1231199df7250d7db","sha256":"52dc3fde8fed872086fafa19ad5ab033a0f831142c4a2ad0c694791526cf4060","sha512":"9024f5a1bceae4a220f97ab0a762b0f74a8779159f9328ff0d7e56aa72f5455d629d887e0d9464f71620a5db7a3c369e78f2580df2d8b42dc54b525048faa0b8","ssdeep":"12288:PFayoFhODxzkKLmwL69hMHU8kINkdwXgcpqlCc4Djkz:nO6DF69yHUhICwXRqlCXDjkz","tlshash":"d425f89cb255b03143a761b5416f090fa336690db40fc5a8fa65e4ea6cbd44e223bf7c","first_seen":"2026-04-06T12:46:11.733555Z","last_seen":"2026-07-08T10:13:16.4659Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1086,"receive":1068,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3xorqevin.top/static/js/app.4161f362.js","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3xorqevin.top/","date":"2026-04-06T12:45:19.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3xorqevin.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 12:45:19 GMT","end":"Fri, 03 Jul 2026 12:45:18 GMT"},"fingerprint":{"sha1":"91:1F:CB:BB:EB:20:A5:9D:C6:4B:49:21:38:FE:BF:75:8D:05:5F:AA","sha256":"BC:A6:EB:BF:1C:24:EE:50:89:96:1A:C9:82:EB:46:55:BC:E1:63:20:F4:A9:8E:8F:7E:5A:84:85:BA:04:A7:FF"}}},"request":{"raw":"GET /static/js/app.4161f362.js HTTP/1.1\r\nHost: web3xorqevin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web3xorqevin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 12:45:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Apr 2026 14:17:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d11d88-63b42\"\r\nexpires: Tue, 07 Apr 2026 00:45:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8z8d8%2FzJxaLwVq%2FrTJ9bh%2Fce5Q%2FM6Qt57wX5yw8fq34UFO8oxbxhCeqMSMnUFPeEHxwp%2FyEF4Aml6TirDHihrtcN2%2F6qkgil5LXErjIHbKabXM761vx7%2BzfBgoBZn%2BYDd7Ir\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80e39449897130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408386,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64668), with no line terminators","md5":"0e81c1c0623084b2165c82737b83153f","sha1":"19237dceb94553dc86cdcf01c7986d32a77a01ad","sha256":"03c3bb1375d0a76c529bcfb7bfd3e29bdce04b4327298ce4f8fede1d66682113","sha512":"c19d8baecd207371ff3b912063e60f7e408959067002064da05eddf8b515afcc248623dc7ac4b17e641bdf05d3db9c1dff947fe081ce543d4d21b4b8ff053fcb","ssdeep":"3072:8wOWURIL817ABnIgMR2Zodb6pPSgNQigDPUCXVzDdN8w6nQGxyqBY:8wOWUiLERndbjgNwzDIxi","tlshash":"9994299df2c4f1ec068b52b5503f2009633b38bd658a6891e7b5cdd49eb589c2213fad","first_seen":"2026-04-06T12:46:11.73493Z","last_seen":"2026-04-06T13:06:56.704237Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1081,"receive":535,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3xorqevin.top/static/img/login-background.03d735a2.png","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3xorqevin.top/","date":"2026-04-06T12:45:22.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3xorqevin.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 12:45:19 GMT","end":"Fri, 03 Jul 2026 12:45:18 GMT"},"fingerprint":{"sha1":"91:1F:CB:BB:EB:20:A5:9D:C6:4B:49:21:38:FE:BF:75:8D:05:5F:AA","sha256":"BC:A6:EB:BF:1C:24:EE:50:89:96:1A:C9:82:EB:46:55:BC:E1:63:20:F4:A9:8E:8F:7E:5A:84:85:BA:04:A7:FF"}}},"request":{"raw":"GET /static/img/login-background.03d735a2.png HTTP/1.1\r\nHost: web3xorqevin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web3xorqevin.top/static/css/app.307d9cb2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 12:45:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Apr 2026 14:17:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d11d88-1a53c3\"\r\nexpires: Wed, 06 May 2026 12:45:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DkgEi8Q2VoFnYalxMYVBoZWS2TSHq9AbzPDZSnoeUeb5l1EPlvFtllYjY%2FKq7tlbcRAA8SHvb79uFvi9vSuS6SxzH3nI6HvCjRoVkXkiOLG0UBiuZBj4cHBtMCTZTRmdhchu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80e3a51a377130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1725379,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"f16cac383879260e267d47057f1f7a04","sha1":"0733214c0689a4d8ccef9da29bbec9d540c35e81","sha256":"99e8ce13caef7f6ab56c415dc8124df97eabd5e3cfa177ecf3839af1f10243a9","sha512":"3c3568d38617a2a2e38e1e978f4322de7d678dc92840e94023bab36fd32e488c2d387473eddeda7fa517dc28fc9acc11d66dfb1a4b7ea87d7848d77495c839a5","ssdeep":"24576:/4g19PJZYInP+NHcyzb+A9DQLyVZWn3rO:f19hdnsHHmA9DQQIbO","tlshash":"1a2523476f6c43bce5267385e5a89ce20d523859ff7d04eb7a0df0e882614eafb46241","first_seen":"2025-08-03T21:34:22.713296Z","last_seen":"2026-07-27T04:50:25.213247Z","times_seen":42,"resource_available":false,"data":null}},"time_used":2427,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1071,"receive":1356,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3xorqevin.top/platform/dev/favicon.ico?1775315862160","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3xorqevin.top/","date":"2026-04-06T12:45:22.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3xorqevin.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 12:45:19 GMT","end":"Fri, 03 Jul 2026 12:45:18 GMT"},"fingerprint":{"sha1":"91:1F:CB:BB:EB:20:A5:9D:C6:4B:49:21:38:FE:BF:75:8D:05:5F:AA","sha256":"BC:A6:EB:BF:1C:24:EE:50:89:96:1A:C9:82:EB:46:55:BC:E1:63:20:F4:A9:8E:8F:7E:5A:84:85:BA:04:A7:FF"}}},"request":{"raw":"GET /platform/dev/favicon.ico?1775315862160 HTTP/1.1\r\nHost: web3xorqevin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web3xorqevin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 12:45:23 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Sat, 04 Apr 2026 14:17:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69d11d88-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ab2jNwGcmI9HKGQE8x1nZgqmnCm0uyePFzTXQY6XNTVgXUPzn8D%2FCrlw69kSY%2FMd%2FA0cug0TGlCeJVISWuuVanLSbxGoRBHXQAzKc%2FM%2F1jx4TkA5kWO3dzPIMQB9ZaHaPKKv\"}]}\r\ncf-ray: 9e80e3a79a587130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"52fcbdc9b89c76570a1246925d321d0d","sha1":"3f50dd9c170be3d69730f9060d26c40c72bb9d96","sha256":"973c5a83c751f168437e3b261dbd6e939123a9908a711cbed65f18d74696a62d","sha512":"c070c3d1805d341a50bdf930c4fd272b83fe40b7f2f5fa873fc7c46c5cdfb867efa265a29b6d190f393c342edd7079d7181fadc8904d7c6b9b67aee9d3dafb6f","ssdeep":"96:fulu06nYkKiOeP1wl7tU3GLtIJyoAbdDes1:BYgF1K7tU2LtIwoEdDR1","tlshash":"c391debd5deea63cc201467128910264f6f2cf207afb2b0994f7f68dd92d40a532c9a5","first_seen":"2024-12-28T13:26:38.876326Z","last_seen":"2026-08-10T18:53:05.104724Z","times_seen":120,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3xorqevin.top/","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-06T12:45:18.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3xorqevin.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 12:45:19 GMT","end":"Fri, 03 Jul 2026 12:45:18 GMT"},"fingerprint":{"sha1":"91:1F:CB:BB:EB:20:A5:9D:C6:4B:49:21:38:FE:BF:75:8D:05:5F:AA","sha256":"BC:A6:EB:BF:1C:24:EE:50:89:96:1A:C9:82:EB:46:55:BC:E1:63:20:F4:A9:8E:8F:7E:5A:84:85:BA:04:A7:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: web3xorqevin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 12:45:19 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 14:17:44 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6treYycvjVveRIkcOnVgNYiKBmMyxXT08wsX8gVp3U89BSKiorWzNhInmfzEcdMJYkzItca%2FJ17A%2FbaJsErKEpJP0dlz4ShxW8F1DwGBDEttonbjmFFmEaYi4J6jN9eeX2dX\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e80e38dcfd6b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17978,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12318), with CRLF line terminators","md5":"a3784d71d40befbdbd9b44bd2247a0f2","sha1":"6c566c3f633deb7a6cfe11262c834b266eff40a7","sha256":"15f203e33806df5adec66bfe23cf112f5d42d18ee314690b983bc237117eb71d","sha512":"25ba171fb4e4d18e3e2232c94c1769eff83e37fdddab09f19fd6cd8e577bf61da6f8977e086a16cdf77afe3a3bdd8a1949580beee71b4050bc9d4b24d377f88c","ssdeep":"192:j/wEKImFLFzcFsi8pirAPP1+hPGOcboGMTFE5CB3ahVYakqt8seWUEJpeg2FMCFk:j/NHfsTMTNZaI+peg2HF4W+dRXDmf5M","tlshash":"ab82c7359340f06547338d27679afb16c46b293379326278b3ece2a58fb06e8035795b","first_seen":"2026-04-06T12:46:11.745497Z","last_seen":"2026-04-06T13:06:56.710957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1454,"timings":{"blocked":304,"dns":289,"connect":1,"send":0,"wait":846,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3xorqevin.top/static/css/chunk-libs.a5063752.css","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web3xorqevin.top/","date":"2026-04-06T12:45:19.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3xorqevin.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 12:45:19 GMT","end":"Fri, 03 Jul 2026 12:45:18 GMT"},"fingerprint":{"sha1":"91:1F:CB:BB:EB:20:A5:9D:C6:4B:49:21:38:FE:BF:75:8D:05:5F:AA","sha256":"BC:A6:EB:BF:1C:24:EE:50:89:96:1A:C9:82:EB:46:55:BC:E1:63:20:F4:A9:8E:8F:7E:5A:84:85:BA:04:A7:FF"}}},"request":{"raw":"GET /static/css/chunk-libs.a5063752.css HTTP/1.1\r\nHost: web3xorqevin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web3xorqevin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 12:45:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Apr 2026 14:17:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d11d88-ff4e\"\r\nexpires: Tue, 07 Apr 2026 00:45:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7OVgau16ITVAuXOZwFd71jbU0pLAVfvJ7HDQynEk05O%2BL%2BZqQ%2Bbl9QuZHds6z%2BNoeg4%2Bq9FE%2FPFOUtjch9oqqrN1wOgO644eSAJNLcTdPeJmAMo7rz%2FcB9wTUr01QpIXqHw2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80e39449857130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27786)","md5":"af15007767ae585146c71c03e6f0bec0","sha1":"d9854b74e2074c9c245bd666acc69a19f551ba0f","sha256":"958b8c3433a6acf3956a60f67da1301b9b5e0ddcf17f8edddbfe413f70ad6f30","sha512":"d8569a2e92fd254dd84bf468aa8245a22ec077366e62337d8de3eb83fe12268718aed18f9070e73dd4b57134a05d3f87e2bb9c2cbbc116f8e1f097bcf67a97c5","ssdeep":"768:8HnuHtSDMvEoQYUoBzHyxFbmSOxd6GObiu7X9WDjNZ5Go:K0SgUoBuXwu9W9Z5Go","tlshash":"5d53731fe913387e813b982f85c012e05f9ef627f0a655ebf041b14f1ade34513a666a","first_seen":"2023-07-09T00:36:09Z","last_seen":"2026-07-19T13:32:49.494642Z","times_seen":21,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":874,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3xorqevin.top/static/js/chunk-elementUI.d9951610.js","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3xorqevin.top/","date":"2026-04-06T12:45:19.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3xorqevin.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 12:45:19 GMT","end":"Fri, 03 Jul 2026 12:45:18 GMT"},"fingerprint":{"sha1":"91:1F:CB:BB:EB:20:A5:9D:C6:4B:49:21:38:FE:BF:75:8D:05:5F:AA","sha256":"BC:A6:EB:BF:1C:24:EE:50:89:96:1A:C9:82:EB:46:55:BC:E1:63:20:F4:A9:8E:8F:7E:5A:84:85:BA:04:A7:FF"}}},"request":{"raw":"GET /static/js/chunk-elementUI.d9951610.js HTTP/1.1\r\nHost: web3xorqevin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web3xorqevin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 12:45:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Apr 2026 14:17:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d11d88-bceaf\"\r\nexpires: Tue, 07 Apr 2026 00:45:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dPQHiJQTWISIL6uZgIa4L%2BET%2BskztaT8IjDVSL%2F%2Bs01244rso38wBGd1m9zkSXUfcotacbavm83csvGqAuvunRfN8H8msRfsv8G6x8EoM6vvHKx%2FTjZJX2n3RHWGWI%2BaU1iJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80e39449877130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":773807,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"880e93a61262058bfa711d3c42686529","sha1":"68a826adb709c9cf8682873e014d82e89a40af04","sha256":"c7ca89025efe0772d2ba62d3a45b069bd7480e04e7a7786ec5c442f06efafaa9","sha512":"3da5c396855bb5f7e5f2f8b5e9b90f1f0efcc5395d93aa2507cd8998d4420300a6025ab66e04493de376c40cc5b16b0f674359be6aaba6112bf32a1aa13d4328","ssdeep":"6144:vjGvrwGAJWr3L31Y0XS5Q58mUD58URcFRrTLvo8CswI/U9+ddVdDRA//:vV87L31Y0O2458U67LU9+ddDRAX","tlshash":"14f4098d72c5f57147a360b0102f210bf33b2aac6809809cb675e9d96d7d909a26ff7d","first_seen":"2023-08-04T09:51:30Z","last_seen":"2026-07-23T16:30:24.609191Z","times_seen":24,"resource_available":true,"data":null}},"time_used":1708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1122,"receive":586,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3xorqevin.top/adminapi/captchaImage","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3xorqevin.top/","date":"2026-04-06T12:45:22.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3xorqevin.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 12:45:19 GMT","end":"Fri, 03 Jul 2026 12:45:18 GMT"},"fingerprint":{"sha1":"91:1F:CB:BB:EB:20:A5:9D:C6:4B:49:21:38:FE:BF:75:8D:05:5F:AA","sha256":"BC:A6:EB:BF:1C:24:EE:50:89:96:1A:C9:82:EB:46:55:BC:E1:63:20:F4:A9:8E:8F:7E:5A:84:85:BA:04:A7:FF"}}},"request":{"raw":"GET /adminapi/captchaImage HTTP/1.1\r\nHost: web3xorqevin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nisToken: false\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web3xorqevin.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 12:45:22 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JHmYYkal2VF3nJ5kd2X4eWXAOZjNPBq2Xiw%2FTSyVsQeoLRoSo59EkqmyGdoo8aCaxV3%2BF8Id4arazYg%2Fne%2F%2B4qnNcO%2FgjYq4QCb9tJfo71xZxAVvv%2Fxb8b29y7tM6vT83cvn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80e3a51a397130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4122,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a542479cdccc9572c841d442d2862500","sha1":"f0c6d5b05c4b4d49f8371db1e3067edb2f232adc","sha256":"5b434a4e71320a339265afe87f330b4f6a58c7315defb62d792989f9b8f5f5d5","sha512":"28b38a1034e7ead8fff8675326cf34f06383b9e7a51f51d25f104b29d66f566dfba276db7caee51904710202f8e14cdfac3bfb791e46341e3f5652b7b03e7982","ssdeep":"96:ud3DwAnwYViLR41UZJBw2ngUUNL3fQ+hcZV7FWCCsM2Cz+cxo:uJDNnw0iq1Qw4pUNLA/7F6sM2KPo","tlshash":"a3815de13f8af80afa51dc018f063b82851e44eb33b4d9544dbc4bb958f691459b0b7b","first_seen":"2026-04-06T12:46:11.753322Z","last_seen":"2026-04-06T12:46:11.753322Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3xorqevin.top/adminapi/common/getAllSetting","fqdn":"web3xorqevin.top","domain":"web3xorqevin.top","tld":"top"},"ip":{"addr":"104.21.67.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3xorqevin.top/","date":"2026-04-06T12:45:22.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3xorqevin.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 12:45:19 GMT","end":"Fri, 03 Jul 2026 12:45:18 GMT"},"fingerprint":{"sha1":"91:1F:CB:BB:EB:20:A5:9D:C6:4B:49:21:38:FE:BF:75:8D:05:5F:AA","sha256":"BC:A6:EB:BF:1C:24:EE:50:89:96:1A:C9:82:EB:46:55:BC:E1:63:20:F4:A9:8E:8F:7E:5A:84:85:BA:04:A7:FF"}}},"request":{"raw":"POST /adminapi/common/getAllSetting HTTP/1.1\r\nHost: web3xorqevin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://web3xorqevin.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web3xorqevin.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Apr 2026 12:45:22 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://web3xorqevin.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4MhvZRig%2B5mAoM0Rz8Uc%2BLUdT43e%2FdZvUecatNOJ9a94nHAWE5ujP1F5h1bv5f21Y0JRwqC8jDib6TO9iIzqRee4vZ%2F0tflhApp8v0MnwYGdeXDcgLCxpFZSsjanJPCMeW34\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80e3a51a387130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4bdb03bbf199027382d766600f535468","sha1":"1ebb8aa8b4ae23933ad2b64ebc7007ac982a0dc7","sha256":"149f53e177c18b194b1bf33604c837dce35d496403af52d53236e62582723c89","sha512":"466fad3780923bcd518a965b1e101afc4dfc0a12fd1380ee982fc77cd9d7877d04cfe3b67aa46dd6e428c23e1a1133b081c2866838df0ad479cb174df621a09e","ssdeep":"","tlshash":"50b012782f2c5376a8c210d5c20e2300213831203520b34c9848d13c50ce0572c149c7","first_seen":"2025-05-12T11:10:13.058487Z","last_seen":"2026-04-06T13:06:56.708781Z","times_seen":9,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"web3xorqevin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}