{"report_id":"5b8d6555-d690-45be-b8c9-fdac6e2638bc","version":0,"status":"done","tags":[],"date":"2026-08-27T14:05:34Z","url":{"schema":"https","addr":"wap.x8-binance.vip/","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":0,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"wap.x8-binance.vip/","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"title":"币安 - 币安官网|币安交易所官网|币安中文网币安","dom":{"size":37210,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (422)","md5":"a53329c03507773d422881c759f6a32c","sha1":"0000ea301c93c9e458d5ca8e65f557e93abf28c1","sha256":"a60c7f135ba4f34a16243eac43da4f98ac54ab66190d8169eccfe73a768e5dab","sha512":"6eb21bf9512cee01c035b3ce4951d1aeede36e3e1c74bd61abcb0c249f79acaf67dbc59977d3accebeb560132e36bd3f9564d61968c72f083b81a14335c5f0bb","ssdeep":"768:cN2bCmy+9Mtat9YKbzbTUB787z3mp1ctAIf:cMbCmy+9MtvK/wI3mraAIf","tlshash":"85f2086e00fd1d77046382c4bff16b0a6d85d21fc7a25991b9accecd4fe2ea58952306","dom_hash":"domhashd3fba2cacb2d2cfbde5bc11a5e4ecd15","first_seen":"2026-08-27T14:04:45.070407Z","last_seen":"2026-08-27T14:05:38.772154Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"wap.x8-binance.vip/","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":0,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-01T14:05:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-08-25T18:24:18.027298Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":460,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wap.x8-binance.vip","ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"domain_registered":"2025-11-27","domain_rank":0,"first_seen":"2026-08-27T14:04:37.550873Z","last_seen":"2026-08-27T14:04:37.550873Z","alert_count":116,"request_count":29,"received_data":15261868,"sent_data":36474,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/js/index.js","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"be4e322b7cd3e69c353002970c80f039","sha1":"cc6f685e0471b9b74700e67d0d9a3f8a0c1c2fd1","sha256":"39e175250822e047ac965b24d27b4d52d5bc8252767ad7a798b934f1bdad6df1","sha512":"56548fa0bb220a74b9dcf61fc3f50ce352c69d187ac84bb36baefc86b59a19622cb3886b28b9f56a551f40fe3ac43844858cb93cc6f1a86fef754a950bee1fe8","ssdeep":"","tlshash":"b601496a63d1246b0e0fa96d236e070a7ab21097882de804fa5c45d07fd092587ebe98","size":781,"data":"","first_seen":"2026-06-26T17:56:46.891734Z","last_seen":"2026-08-27T14:05:38.822625Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/js/jquery.min.js","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-27T17:35:29.353198Z","times_seen":143915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/js/ajs.js","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a452805f5e4485569dcfe79d25e66c0","sha1":"755308439eab829dd2d2387e7edd795719baefdc","sha256":"1de00c51e5a3bdbc8ecd78589e1d076ddcc97fd1c04ab307db02fc198c4e46eb","sha512":"004ec934bb7234ec3388612d48923b7fb79e63f1168706696ca7c94ed1aea4a439be2d203275599ed097c5c332a43ef35eec0b7db1289a99288eb24265ccf978","ssdeep":"","tlshash":"3351854457e30c813613d0d82f5a97492235c01796adec193f1e87ec1f1246790e6fea","size":3130,"data":"","first_seen":"2026-06-26T17:56:46.886915Z","last_seen":"2026-08-27T14:05:38.779672Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"aec5d37c0e90fce792d525b3f6f8614a","sha1":"2d1583fb87043788c3c2e6b48e9c6e5cb9b993ae","sha256":"7a22ff3983f182818cd43abb091a2079021e3f5eaa5a3a7bfc376a9ad5e5d4a1","sha512":"146cf0b762e6f5ca71b5ba237440dc8663c258b8550e5017d33343b6f549e1447c136685643344e190bb73694e2d832780936a6847750612ccb965e236ffcdbd","ssdeep":"","tlshash":"e0e04f8af3d16e415977316cdeaf4048a91605cb71a8ce40703e1ac57f28426e8b2f93","size":376,"data":"","first_seen":"2026-06-26T17:56:46.923182Z","last_seen":"2026-08-27T14:05:38.83384Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"23110a4090e6e50b23c5663d9373e904","sha1":"f55a780f39aee5d06a637a10096251dcd92e6f7c","sha256":"63de6cdb866191aff8d084989ab34d814f36fd01e71aff7a3f00e2c17ea3ea97","sha512":"f8369d6ec57dd24cddd9da0cd769472648d8e16b90c05715aea14ce2d758fe5190763d4fa30bf50e1c88d18d2b8eed75ba898c6f6150e8b2503b3247fdce7a84","ssdeep":"","tlshash":"0dc02b4131e30a0884f0e4a9409cc11ca8e1807e4ba00c35010d700cccc90c103d280a","size":140,"data":"","first_seen":"2026-06-26T17:56:46.92514Z","last_seen":"2026-08-27T14:05:38.835033Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b55f6bdb428fb4499c517351b4fd36c","sha1":"b10984bcd2d24bcc10415a7f1ef6688b235db339","sha256":"67c3eab525435f81d2ecb49f66018e3786f3e063e3e9ad4befef551f39ba6fc5","sha512":"66761a2eccb82eacce750c20227bace8079d0d9726f26a8dfca7372ba98c2361376a7f7b87600f66983fa08d892d6bcf4d327b1108e671911480fa8b950e74f3","ssdeep":"","tlshash":"8c900200f68a04a9430629002933814300d1a840839641a4a44c404b0240640f027d41","size":54,"data":"","first_seen":"2026-06-20T21:36:56.194699Z","last_seen":"2026-08-27T14:05:38.836542Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/js/dp.js","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d44f94a5c9aecdc72b620b980fc08427","sha1":"a2a32b6530f3b02b4f2332d0331572058e063206","sha256":"313610306ec580d2d2b8ed5690aabbdc1eede6ce4af05fec75a10d597c4ca3a4","sha512":"3b1c61097f4479f30a46847fcde101572ab2a8effde39bf59023e3ca5534e2df3e0ad9fb6495f3e7e5573b93e08ffebe66c461065e601124a167f15848c61ff4","ssdeep":"","tlshash":"0231b41956e318730377f494672f9212ba61500bd859bc86b71c0fc57f92c93c9f7a98","size":1816,"data":"","first_seen":"2026-06-26T17:56:46.896716Z","last_seen":"2026-08-27T14:05:38.814286Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/js/pv_common.js","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"18469a3d9e6a10bf606cccdc0867c15f","sha1":"6acdb5b0a0eaa922897f246015a0adaf19ec1f4a","sha256":"70cf49341fdbd69494ad8bb00f1bca86097d8dd1ebcee1c55c507d56f6ad24b3","sha512":"1343b7d57b2a220e3d1e64dc2dd74a721dcaff2d9c377698622e1b706f55307781b6f3e9bceb3b9369c434faf2d55b4dffc6c30be68380ba2f25421e2fe0fd9c","ssdeep":"","tlshash":"7a213d4ae8f724936b53b078068b501931371a2b885ddd183f4d83d94f6c53dd5a56dc","size":1345,"data":"","first_seen":"2025-11-01T10:11:19.920889Z","last_seen":"2026-08-27T14:05:38.823414Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wap.x8-binance.vip/","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-27T14:04:56.557Z","timestamp":1787839496557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 27 Aug 2026 14:04:57 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; expires=Thu, 27 Aug 2026 16:04:57 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; expires=Thu, 27 Aug 2026 16:04:57 GMT; Max-Age=7200; path=/; httponly; samesite=lax\nserver_name_session=e0421870ef46d5871a06f12afe8db3e1; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-08-27T16:04:57Z","raw_expires":"Thu, 27 Aug 2026 16:04:57 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; expires=Thu, 27 Aug 2026 16:04:57 GMT; Max-Age=7200; path=/; secure; samesite=lax"},{"name":"laravel_session","value":"eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-08-27T16:04:57Z","raw_expires":"Thu, 27 Aug 2026 16:04:57 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; expires=Thu, 27 Aug 2026 16:04:57 GMT; Max-Age=7200; path=/; httponly; samesite=lax"},{"name":"server_name_session","value":"e0421870ef46d5871a06f12afe8db3e1","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_name_session=e0421870ef46d5871a06f12afe8db3e1; Max-Age=86400; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39367,"size_decoded":14752,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (408)","md5":"79c86abb9958edf5f6127aaba0f9c258","sha1":"d17a2fb328af3cb21a27d6ee4de27f7964bc18ba","sha256":"5d47776107e51580ce9fde0bb799e4fae4adfc0ef8640801bf5ecf6334e75fb5","sha512":"db5a750958273bdd5b09a3cbd56202d29bddafd0bea3446afdf871d412a43c8f75951be5277a84d5a629cf03d162b7f63199844ca3c6eaf726f7cb5863e306bf","ssdeep":"384:xWTdaWxg4fBr7q/WbbswkvhWMiXvay6eD8/RWYdlpebwLflpebwLaKHOCmuDwczc:kO/Y6E38/RWYMbzbTK9bU7BxCttSXmCL","tlshash":"ef03192b40f5de3704a381c4ae716b1e7d84d207cbb69590baaccdcd5fe2e91c952702","first_seen":"2026-08-27T14:04:45.120912Z","last_seen":"2026-08-27T14:05:38.77645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1071,"timings":{"blocked":-1,"dns":24,"connect":260,"send":0,"wait":522,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/public_css/public_css.css","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:57.869Z","timestamp":1787839497869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/public_css/public_css.css HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 207\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\netag: \"69a68772-cf\"\r\nexpires: Fri, 28 Aug 2026 02:04:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207,"size_decoded":711,"mime_type":"text/css","magic":"ASCII text","md5":"bc8a4184d36d6937f8b0ee51764044ad","sha1":"d2ead814c88e6c7dcec42f027b317c1a60312d80","sha256":"820563cfb72fa6a27dcc963a4cfdd9a7093e876ed70c2be897a3ba382984400e","sha512":"dec5315966de9bf504b441219401379ea464ec7e007645538d3a8ada0b6521585865a0808271d1e030d6913a280e5a5a8886aad50f12fef4a14fbc2b4070871f","ssdeep":"","tlshash":"c9d022c3de9b0482b657d0e04fb222f79abd0803259ac19ab68432f4cf06ec18821401","first_seen":"2025-10-14T16:42:36.052249Z","last_seen":"2026-08-27T14:05:38.77879Z","times_seen":45,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/js/ajs.js","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:57.877Z","timestamp":1787839497877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/coin-4/js/ajs.js HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-c3a\"\r\nexpires: Fri, 28 Aug 2026 02:04:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3130,"size_decoded":1878,"mime_type":"application/javascript","magic":"HTML document, Unicode text, UTF-8 text","md5":"5a452805f5e4485569dcfe79d25e66c0","sha1":"755308439eab829dd2d2387e7edd795719baefdc","sha256":"1de00c51e5a3bdbc8ecd78589e1d076ddcc97fd1c04ab307db02fc198c4e46eb","sha512":"004ec934bb7234ec3388612d48923b7fb79e63f1168706696ca7c94ed1aea4a439be2d203275599ed097c5c332a43ef35eec0b7db1289a99288eb24265ccf978","ssdeep":"","tlshash":"3351854457e30c813613d0d82f5a97492235c01796adec193f1e87ec1f1246790e6fea","first_seen":"2026-06-26T17:56:46.886915Z","last_seen":"2026-08-27T14:05:38.779672Z","times_seen":3,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.048Z","timestamp":1787839498048,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-27T17:40:47.361755Z","times_seen":18134052,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/news_img/4YF5pQ9V.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.066Z","timestamp":1787839498066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/4YF5pQ9V.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-3f74a\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":259914,"size_decoded":260376,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"c6bdc9b60f0eca97b82c1d9125620729","sha1":"8c839e89ed4f14338d7cd4a98a6b5438fe9472b9","sha256":"f9b87e00e185365b24d4bf63ea48d452c200a9460b1e155b50a021a7d738b6dc","sha512":"8c39d357047b0f5194317088a62fd609719d7da1c43c9db4084df29d2f992b58e9dd6818bfef12bbc94cb21a8c3aa62d9682588706dfaf1f53336f24a0f5ba71","ssdeep":"6144:ze6fjfSjM5hA188STtsbzgbh/efWPVTDPE4kvtmzQncEtY7d0:t7fSwhAZ4Ktf6Hs1ncEtYp0","tlshash":"3f4412f22b7d3231729eb77a5a4f781cae758b71e0d028c3f1b39110075aa9a35d4563","first_seen":"2026-07-04T09:21:09.206187Z","last_seen":"2026-08-27T14:05:38.789051Z","times_seen":4,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/news_img/hrpiCxzj.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.067Z","timestamp":1787839498067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/hrpiCxzj.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-4ae75\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306805,"size_decoded":306922,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x1102, components 3","md5":"880da3527c41a86ea0e5a3d5e828ecbe","sha1":"92f9176b5004585fa792d3e374fc78371ba7d9a5","sha256":"47e1d0edd2849649abb5104c9a399752bc9a682a4a06e7aeaf2db46111762a6d","sha512":"77bf2f66e19d2c87926259e765e1f009142c7bc3a3a458352fbac3ece15e6a7a4f81e8096058281503554d05eb306a79377a947db501ed15283ee9999db25315","ssdeep":"6144:RWE1cYUqxObMo9V4Wsx5YKXEH9kdXp2C54bXjEAv3P/BFxYUiPSwLIakFqCqdC9Y:mYROgo9CtHYKUdo4CmbXQ+2TLIXFqCqj","tlshash":"536423e553d1fd7be1fd027621337cb8b33bb5cd10cc7699142a16e8acdd868621984a","first_seen":"2025-09-02T04:51:20.910951Z","last_seen":"2026-08-27T14:05:38.792021Z","times_seen":4,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/images/logo_binance.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.054Z","timestamp":1787839498054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/coin-4/images/logo_binance.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-d25\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3365,"size_decoded":3547,"mime_type":"image/png","magic":"PNG image data, 192 x 79, 8-bit colormap, non-interlaced","md5":"7cc8c90b3e2bc7bf79e17c7664dfb171","sha1":"a4992e50d85072e2fa00cb23821bfcf1d96de474","sha256":"652d5a85334cc23360c45469083e3f04028af526764c2f217536c25400a4b721","sha512":"94438a80149de3f5277c297640377971eec843f4ef909bb167f5a95c7d59f5db0e5b0c39a3d0c63103d082c7b3bc3bef627c1e073961d6e8d003a0735d6fc8af","ssdeep":"","tlshash":"3961d61292d2bd3b5de850dfd60f5911c31ac91d00f560891bb73d392ad4af97c3ca90","first_seen":"2025-06-16T06:13:20.559793Z","last_seen":"2026-08-27T14:05:38.798206Z","times_seen":82,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/news_img/F18MSwdw.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.063Z","timestamp":1787839498063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/F18MSwdw.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-43237d\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4399997,"size_decoded":4401877,"mime_type":"image/png","magic":"PNG image data, 2730 x 1535, 8-bit/color RGBA, non-interlaced","md5":"9030e3b71fb35e3153c1ddf39fe3456e","sha1":"f85cccb5e8c6d2565f544d6943aca750b68e9b8d","sha256":"45f9bdf481ac4598bb250518425c61a6970008ee49fac5c7101d868a88d25372","sha512":"689c9093317050a08a8380cdcb3ddd0c78c3fa8fd8f4ca34b7ab09f3c31af65814c2dce2601bea67a4315f77aeba2a84e95c52947e40270d6b24a5a3f244e83e","ssdeep":"24576:my4ApybNX32DHpC435nd1SyviZfpHXaspo4rtfkijM6aJYVe7sXQ:my4jbNHQJC435yxHKeo4VkijM9OAL","tlshash":"7e253384f5ad49b4d02bb2693f260e1891bebd00b7accaf61444c3f74f01d58b79675a","first_seen":"2026-07-12T09:01:40.431814Z","last_seen":"2026-08-27T14:05:38.80319Z","times_seen":3,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/images/binance.ico","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:05:02.015Z","timestamp":1787839502015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/coin-4/images/binance.ico HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:05:02 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16958\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-423e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16958,"size_decoded":17400,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"7d14c6d369f5003641a6ccaaea6cc06f","sha1":"ef894ad1a6e753a723333f11867106dbfebd1d2e","sha256":"6d9de253ba04d15b311605e8f990e05749342df264b887a13bfc009ec35bd22c","sha512":"1c5c027f54dc0e3ec4a8ebc982773ae2f0d2ffd1d4ace9fe06cb9111b78b6afaa4a6f6108df6c3c7f58463176d818fc4885e77321c01f30a8e2ba82172082c00","ssdeep":"96:qyacaRaSaEWU+sneH+mmn7+JgF9aMa6awa1/0Y6Sx/a:M+pH0Yzx/a","tlshash":"48727e609ca7bb27d02668f121b3cce4e656aff299d81b65b10077efe1f161340532da","first_seen":"2025-06-16T06:13:20.562995Z","last_seen":"2026-08-27T14:05:38.80518Z","times_seen":54,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/css/main.css","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:57.840Z","timestamp":1787839497840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/coin-4/css/main.css HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-2b54\"\r\nexpires: Fri, 28 Aug 2026 02:04:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11092,"size_decoded":3217,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"f3934b19cbf57d91b923f935ed7b375c","sha1":"31751ef0809b51ed81ed2793a0097511cc22aeda","sha256":"58e7305acb43090a7238aa12e23178496128632d470cc5042bec19552349155f","sha512":"954663d0d7c3ed26dd5a2028df7b15d86121190c244a03d9e358f58760e1587710e7ac02353e1608a7ac7d16803ab79b168b4dd3a61fee6ef48ff33c3c420d98","ssdeep":"192:W7NVCFNAXNOvuO+sOUmdTKuYKSx8Y9dEtsTe9S/Yga3YkuJrynFvCZvhJBsskBtG:BNAAvicmsN7EpkY3YkuJrynFYB/6o","tlshash":"fe32efc766b60604b80fd4b47da29756736c8443924fcdbc7be4246cee8c2c559b2b8d","first_seen":"2026-06-26T17:56:46.880921Z","last_seen":"2026-08-27T14:05:38.80631Z","times_seen":3,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/images/banner.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.054Z","timestamp":1787839498054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/coin-4/images/banner.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-342b2\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":213682,"size_decoded":214024,"mime_type":"image/png","magic":"PNG image data, 594 x 458, 8-bit/color RGBA, non-interlaced","md5":"e9d6b2802d52e5664aa4a8f66e393468","sha1":"77ff922a7bea37cf6258bedab3666afa7e24e03a","sha256":"6d14f853cce32210357947b6e217348913a010357b7f2345c3c4fa814b5a0a1d","sha512":"f4db819346f8d7dfd6432fd2606c8e4a58897de1081fc05e34beb68a48cee0c76108b445e90a52dd81f6b867c9a3069d61ff4582f694a645e8190409ef5ce0d7","ssdeep":"3072:tZeLH3iSBXkbqv6Pvg/8S4BiU/ppQUgyVjSwJIti58kZqiOXFBDKOw:3miSBUGCPvEd4p/zgejSd85xZqiIKF","tlshash":"5b24238c1293c1b5f49f4e4dc258dc39ffb4795f637b6a72082486947a29128ee30f26","first_seen":"2025-08-17T10:24:09.9407Z","last_seen":"2026-08-27T14:05:38.806918Z","times_seen":11,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/images/0.gif","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.070Z","timestamp":1787839498070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/coin-4/images/0.gif HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-2b\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":549,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-08-27T17:04:07.312224Z","times_seen":40979,"resource_available":true,"data":null}},"time_used":1366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":775,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/js/jquery.min.js","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:57.876Z","timestamp":1787839497876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/coin-4/js/jquery.min.js HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-1538f\"\r\nexpires: Fri, 28 Aug 2026 02:04:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86927,"size_decoded":31071,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-27T17:35:29.353198Z","times_seen":143915,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/js/dp.js","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:57.879Z","timestamp":1787839497879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/coin-4/js/dp.js HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-718\"\r\nexpires: Fri, 28 Aug 2026 02:04:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1816,"size_decoded":1243,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"d44f94a5c9aecdc72b620b980fc08427","sha1":"a2a32b6530f3b02b4f2332d0331572058e063206","sha256":"313610306ec580d2d2b8ed5690aabbdc1eede6ce4af05fec75a10d597c4ca3a4","sha512":"3b1c61097f4479f30a46847fcde101572ab2a8effde39bf59023e3ca5534e2df3e0ad9fb6495f3e7e5573b93e08ffebe66c461065e601124a167f15848c61ff4","ssdeep":"","tlshash":"0231b41956e318730377f494672f9212ba61500bd859bc86b71c0fc57f92c93c9f7a98","first_seen":"2026-06-26T17:56:46.896716Z","last_seen":"2026-08-27T14:05:38.814286Z","times_seen":3,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/news_img/aONUhtc7.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.061Z","timestamp":1787839498061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/aONUhtc7.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-438f1\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":276721,"size_decoded":277148,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x1102, components 3","md5":"09494cd66a8e575d02c50e0d56cf7145","sha1":"b020f95911b0fb280a2cce98d841b0ae482c514b","sha256":"77c2e760421095815bd023c11625e68c0a7526d8441ca854ceb83a4e6515df3e","sha512":"db8ca51d99b2ea0f0872023082ea581c4a4446429fc8f84748374e86fce2bbd52d7897ba9ed3dffc15a79b010f0147945f1d1ce9d13a57e86191cb4650840f5f","ssdeep":"6144:T6VFlOkYw5nVe7euDshR0jf2DW7qOt/ye/DpIzQepFgX:TmPlX5Ve7bzeDWv/ye/DpIzde","tlshash":"86442332c60f967c12289e58674ceb7ef9e4297ea723683a4956c0b1de9c8f9c04474d","first_seen":"2026-08-27T14:04:45.075906Z","last_seen":"2026-08-27T14:05:38.815556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/news_img/AGd1nsOi.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.057Z","timestamp":1787839498057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/AGd1nsOi.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-3e8787\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4097927,"size_decoded":4099712,"mime_type":"image/png","magic":"PNG image data, 2730 x 1535, 8-bit/color RGBA, non-interlaced","md5":"cb4ea5d081cd3f3ba394741b845d05fa","sha1":"c6a420ec94335fba4b64715199217f8295635af6","sha256":"848f4445bd7bab25099b6e1a45f07534c80cb498c55455cdb6689569e1e7524b","sha512":"b89356e74bf173fac744a846bbcb7020dfb862de3210d169b931d0138c3f4c92ac3b636abf4d6cc7b5392496fcee137f5726183d882f79b67c28533668e9c17d","ssdeep":"24576:mFXRNlBuJI6zVvwiIAZ0omc1AJVQr1rQfHdI1wiit95JqNrq:eV6Bp3WoZ1AJ22fq1/i5Jqdq","tlshash":"8b25237bb5491fead3ff00df091b135c22d6a1da9ca7585220eed381c2fc795126632a","first_seen":"2026-06-24T11:41:16.962188Z","last_seen":"2026-08-27T14:05:38.817571Z","times_seen":4,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/news_img/uc8J6GQp.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.061Z","timestamp":1787839498061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/uc8J6GQp.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-2b2265\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2826853,"size_decoded":2828253,"mime_type":"image/png","magic":"PNG image data, 2730 x 1535, 8-bit/color RGBA, non-interlaced","md5":"96410dd963452f88344b3c6a19368f6d","sha1":"d4df2146dfbb5c8ce4de1f714a8a2ad151a27a2a","sha256":"bd55e2b6543823bc8aec9d698b22a6183c06f19196b664325ce01433fc853ba9","sha512":"666d98eceb33b6de372ccc8e6283e6d678aecfd8e0731b9bab15ece4dc5cb5dfea9d8c7bfa0540829fefd89148a2e783a0e51e6414b7395e3dd89061d0e8b214","ssdeep":"24576:pUy8iY9tLfvqObRMnl9VZsoIf7pfm3V60Y9C9vs9Q2ZveygA1vMnM:T8iofvTRQPwoIf7pfm3V6qxyRvfx1vMM","tlshash":"ab25235854b849eae3eb7384f09c449db5c610cf4a33a4bf97d64f934b2b8a804d23d6","first_seen":"2026-06-24T11:41:16.935603Z","last_seen":"2026-08-27T14:05:38.818265Z","times_seen":3,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/news_img/dgF0hjB4.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.064Z","timestamp":1787839498064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/dgF0hjB4.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-5618c\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":352652,"size_decoded":353207,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"8baec0d88889d908a08c55ea0f8eefff","sha1":"9487aaf98cce19b6a76e0d834d37c948283d09b0","sha256":"566cc420c5cac20b57c63259e48849964dee0e3e9fe7232c0c6c3a3974cb9371","sha512":"72aae816f9f9632bae6b11da5ac747c0a1d6ed1d98bd770268e8dee1f2004bc026c1d7ac6a158fbdf286ab5fe3778ddcc371c66f14967dd18a7b989366afd093","ssdeep":"6144:B1iVuLjcuHycpycaTUu0O0h4sT/oW2TZNx5qVT0IlewAiNVA8yrXXDOI7o0PsaQw:+V8ouNpycaTfr0hNkW2TZNx5qVT0IQwG","tlshash":"7f74238f497a22a5dc5caed37805117a14e488c2b05589e2d4df9b801f1eaee3b70df7","first_seen":"2026-08-27T14:04:45.096425Z","last_seen":"2026-08-27T14:05:38.819545Z","times_seen":2,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/news_img/ytjKTafO.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.067Z","timestamp":1787839498067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/ytjKTafO.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-74812\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":477202,"size_decoded":477825,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"1114f7583831d6e62528de09f7410528","sha1":"c58ad64fe019f249dcc82ea754bdd43fe8fe84e5","sha256":"af071965c1e6a086b3fe92b7a46d1f5c76cb0560187c205f49bfda1c829b6530","sha512":"17733887479a5588e4591235174565374d0c16f862cfbc7d581683163186f9f119b4af7c5e2b89b2203e1ebc44ad1f7c33e8d4fdcffc1383598782d6c0adbde1","ssdeep":"12288:VOTfKfHrHpef8Ti8Pd0AtOjYcXGVIkzuGXaGQUr8wF:VeAAs5aAtOscXGVl2dw","tlshash":"20a4234835471f6bdc5704b25258fff6f5cc845e6e83b8e5c3686eac60aaec049af850","first_seen":"2026-08-27T14:03:32.938316Z","last_seen":"2026-08-27T14:05:38.821521Z","times_seen":4,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/js/index.js","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:57.871Z","timestamp":1787839497871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/coin-4/js/index.js HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:57 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 781\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-30d\"\r\nexpires: Fri, 28 Aug 2026 02:04:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":781,"size_decoded":1300,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"be4e322b7cd3e69c353002970c80f039","sha1":"cc6f685e0471b9b74700e67d0d9a3f8a0c1c2fd1","sha256":"39e175250822e047ac965b24d27b4d52d5bc8252767ad7a798b934f1bdad6df1","sha512":"56548fa0bb220a74b9dcf61fc3f50ce352c69d187ac84bb36baefc86b59a19622cb3886b28b9f56a551f40fe3ac43844858cb93cc6f1a86fef754a950bee1fe8","ssdeep":"","tlshash":"b601496a63d1246b0e0fa96d236e070a7ab21097882de804fa5c45d07fd092587ebe98","first_seen":"2026-06-26T17:56:46.891734Z","last_seen":"2026-08-27T14:05:38.822625Z","times_seen":3,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/js/pv_common.js","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.047Z","timestamp":1787839498047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/js/pv_common.js HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-541\"\r\nexpires: Fri, 28 Aug 2026 02:04:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1345,"size_decoded":937,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"18469a3d9e6a10bf606cccdc0867c15f","sha1":"6acdb5b0a0eaa922897f246015a0adaf19ec1f4a","sha256":"70cf49341fdbd69494ad8bb00f1bca86097d8dd1ebcee1c55c507d56f6ad24b3","sha512":"1343b7d57b2a220e3d1e64dc2dd74a721dcaff2d9c377698622e1b706f55307781b6f3e9bceb3b9369c434faf2d55b4dffc6c30be68380ba2f25421e2fe0fd9c","ssdeep":"","tlshash":"7a213d4ae8f724936b53b078068b501931371a2b885ddd183f4d83d94f6c53dd5a56dc","first_seen":"2025-11-01T10:11:19.920889Z","last_seen":"2026-08-27T14:05:38.823414Z","times_seen":35,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/news_img/iatki7ix.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.056Z","timestamp":1787839498056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/iatki7ix.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-38e14\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232980,"size_decoded":232979,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"dc6d3d0382bf81c7bb42d049fb41c7c4","sha1":"2485dbd066ca669e6a0799d838b6e773bd19b269","sha256":"f72a61a88d5f7beb44e09c09bc0002c078e506b3c1609c51cc6b55eb2fb63999","sha512":"5d1236604c1aa338b683e13855d96cd324658a9ef62ea01271cfb7e548483683d37df67e04b1b3b64384a271de7bd01dd6a3d8880bf3a465df680a703eaecd4e","ssdeep":"6144:1ob1BEMtTtrnVKxwrwYDFm/QP8mNyA3BlCptHMcnuiUI9y1zyP1mNc:16TfzjVKxwPm/BmH374qWPmm","tlshash":"d7342242ecb3240eab0852fcd258ad0d52d8ff28a0bc300681e177e5dfa97a7ad5556d","first_seen":"2026-06-24T11:41:16.941778Z","last_seen":"2026-08-27T14:05:38.824279Z","times_seen":3,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/news_img/mPnna0WT.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.059Z","timestamp":1787839498059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/mPnna0WT.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-46d96\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":290198,"size_decoded":290692,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"da961185c3232a1863d4dce8ebd2ea7b","sha1":"77e07db6ee2b8161b99f8037baa75a307f0500ce","sha256":"8803d20a55b1cd626d36b207718f93ca2f1307bf9349d948f7fce7e166e6d05b","sha512":"e739c086effed0e91a97c224c5eb5d53864bf624ba4123508340026a00d6154a8672416050c6263765dc6b7a85ac599f52d398d5741714366cea971b2c92a01b","ssdeep":"6144:5gLe2IBbhGtbSAWcYzVijt+r1ZEZuqzj7/WvoeZYEy2FwARs:5ZheULpZZqzj7RWTFwARs","tlshash":"a45423cee70bec3c19d42ba4068bb65c9401206eb7c8bd7f52219e34614d459fba3d9e","first_seen":"2026-07-04T11:54:32.852989Z","last_seen":"2026-08-27T14:05:38.824925Z","times_seen":5,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/news_img/XUEaip9H.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.068Z","timestamp":1787839498068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/XUEaip9H.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-4ee98\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":323224,"size_decoded":323616,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"c0f0d7dcaf736caa979d7cc48e11ad28","sha1":"dd6445528891bc65e6e94879958bf421d0934f9c","sha256":"61e2a24dd2ceac116aba10afbb28301c3db72cc08530de39a7b9bca973e59aa1","sha512":"1cd979fc9382465163d1da6c2ee944a2f96dd7f2b19f3873f630755b62e6c108464068635bc02a0455e695bfc1182821aec0158fad1595b7646c23cd45222854","ssdeep":"6144:Szsh7nSdDZPgxChpQiMo8sm/byv1bnY5mXC5NIBqiWcEQ3L:KaOd5qCXNMwbImXMhWL","tlshash":"3c642345f34226c5f011ca36bc865fc71b7bb0a9d8f594b906064e96acf27c8387ad27","first_seen":"2026-06-25T21:56:53.607544Z","last_seen":"2026-08-27T14:05:38.826864Z","times_seen":3,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/js/main.js","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:57.868Z","timestamp":1787839497868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/coin-4/js/main.js HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-4d7\"\r\nexpires: Fri, 28 Aug 2026 02:04:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1239,"size_decoded":1071,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"23294fb9bc44ec1e0a89846ba5881b9a","sha1":"82bdbbb1735340dcef5419dca29b56bb44719cf3","sha256":"dc0825753b07ba25c499c5e98d446e7b60fda2489f71cacf58d5bbba80ed7f8a","sha512":"b08d5a600d1f451c090f4c8e6235ac9a73a1bf6ccd61cff89dde515ef5cedff9e85ba262370e8090e38e42edcbe8645fc6592b3110574c10d73fb302e1251e76","ssdeep":"","tlshash":"3e21caab67e220360a4fb569730f460c3a75208b681d9c06b91c86d17fa1e6506f7eec","first_seen":"2025-08-01T07:52:31.788299Z","last_seen":"2026-08-27T14:05:38.82748Z","times_seen":30,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/css/common.css","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:57.878Z","timestamp":1787839497878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/coin-4/css/common.css HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 982\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-3d6\"\r\nexpires: Fri, 28 Aug 2026 02:04:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":982,"size_decoded":1487,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"f3abbc2fa9a9ac3dbefe8c74b7cef4a8","sha1":"2a92f5784d0f5686016964ead5eabc65f8355e04","sha256":"1df15adddfc6b0df931ba7b808e3b5b8d607dcebc626f408da9d1623af7adf17","sha512":"d5fc90c8d7f9e0e9da54c6e876ccc58a92a7cbbe693b9d033412999fa8c7aa8b30297d06b769ec0e2af3e013e0f796bcee9e032581d112650b5ce3d3babb0a15","ssdeep":"","tlshash":"1511bd4749670d81762bf4940f3886491269904b934fe58e3bc97a888fcf5c8d0b3be8","first_seen":"2025-06-16T06:13:20.576173Z","last_seen":"2026-08-27T14:05:38.828399Z","times_seen":366,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/news_img/tKt352Ky.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.062Z","timestamp":1787839498062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/tKt352Ky.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-61a53\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":399955,"size_decoded":400456,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"71a36b148bd21c60b12c8ee0c0230c7c","sha1":"15ec769c5340e898de32ddd18f765904564520cb","sha256":"9d4026bd75bc1751fb4dcb42757c989cd14871c37425379d6f0d929cbe3a79ba","sha512":"0d6acf5b0f3a6626804f1429cea76e683a35f58859bd14d7f3351b58eeb4a09bce77e6f17d988064e451461adcb2610006a8bf701c2636828437dc2960711d78","ssdeep":"6144:6fUfY+cEkJSgKPLlMFToLBkFyWUe9u4pGc89HKY+DDnaRuWcBjyPvB2:E+cEuSgKrLBkwnsu40D9H2DDnaRuWb2","tlshash":"e684231d8b41a968bce701467620e3bf5c7a2cbe1d2898cff799b141388264f79570f9","first_seen":"2026-07-04T11:54:32.849884Z","last_seen":"2026-08-27T14:05:38.829666Z","times_seen":4,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/news_img/7f8jtUG7.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.065Z","timestamp":1787839498065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/7f8jtUG7.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-5da65\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":383589,"size_decoded":384016,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"d5307c4f382715b6e639b4a978b9884d","sha1":"42bf929222c3e181634eb8729c40b32cc3b72789","sha256":"8bed591c69d79309416c9b0a5045318f5b1ae67f4db41946b2f1ce4ddea2291e","sha512":"1699d8e5dd552f7805163cc431da5a487bae5a4aacdefc7c6739fa52b968916148a3eb9fef53fc9eb3f1b8907a26be3322f6336b6d8fa3b5576f2844bae1929a","ssdeep":"6144:aW+RETyDoPvPvfpd7AcY4BmGMOl3JZQT2arKVPjHgmFao0EkyqcI0B3OSdvDMH1:gxsn3fpieBXMOW2arKVPjAIaMecIo3PQ","tlshash":"bb8423bd652ee3d00d9f073791ede0474768a5016deabd8cda5003a5bac32bad7086b1","first_seen":"2026-07-04T11:54:32.834514Z","last_seen":"2026-08-27T14:05:38.830785Z","times_seen":4,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/news_img/OTxvmX7M.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.060Z","timestamp":1787839498060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/OTxvmX7M.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-34d25\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":216357,"size_decoded":215868,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"df763e7fbc42dcb17529e89c6feff066","sha1":"76ddb0739564d130ea98955476741860419c0780","sha256":"19cc5212d4068fc6e946f1deaa0a6d241ecca3ca440dbc6cc53d2cea19b569ad","sha512":"cae4ad5bf5a89990da16eb131e0dfad6498c8613eaf387970efc86605986babf83645fd1f2792297c8f9abe40b84c5b7c83b75ef1305b3f9a1da31980089e20c","ssdeep":"6144:tdkI93xIOW/3Qt28UxOxO/BJoHEZYDTWE+3e7J2q:tdkI9yOW/gt28qOA/AHEyTWH3ep","tlshash":"39242392e1da73ffa8241b6cc0e3a5e52346c499e34371e9014c50f2dbbb4ee66935c6","first_seen":"2026-08-27T14:04:45.113371Z","last_seen":"2026-08-27T14:05:38.831412Z","times_seen":2,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.x8-binance.vip/static/coin-4/images/binance.png","fqdn":"wap.x8-binance.vip","domain":"x8-binance.vip","tld":"vip"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.x8-binance.vip/","date":"2026-08-27T14:04:58.071Z","timestamp":1787839498071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/coin-4/images/binance.png HTTP/1.1\r\nHost: wap.x8-binance.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.x8-binance.vip/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii9PMkxmeE1UdDJWd1lONm5ZN0VWTVE9PSIsInZhbHVlIjoiMTlRMFVSeElVeExkcVhIZUZod2JTUUlMTUdVZG90U2dZU1UvUy8rQWFFelV6OUhDdU9QTFJFbEpxOHFFdDFUcWVmWnA5S2NoTk9rdlBwanBObmRlbEQwN3ZuTjQ1M08vZXVaamRxUVU5WVhEczA1bU84NEpJRjRNYjZCMFJiUVQiLCJtYWMiOiIyMmQ0MzUyMzU1OWQzN2NmYWM5MWU1MmI1OTE0N2VhZDQ2NTliZGFhYjNmYWExNjgxMWZkZGEzYjAxODQwNzhhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5kdEN0ZUlQeHd4ODFVZW04YUd5WlE9PSIsInZhbHVlIjoicVNvRDAwb0Ixc3BaUnpFRzVqS0VsbEQ3RWIvSUhIZEs3REt6Z0JzRGFLN2tvTENqQUFoUUFqK2t6dC9PcE5MTzJGVG1ZYk96MFRneDd6WVhmbUpJdVBKR3hHYTZobVZQR0xWdjU5N1pnNmdLSEhTbXR2YlhFNEVKTjBlRy9LaVEiLCJtYWMiOiI5ZWFjNzIwN2Y4YmM1Y2U3ZTM4YzUyNTJhNTdmNGZhNWEzYTc4YTU1NWM3ZGMzZTFmYmJmM2VkMzkzOGZlMDk0IiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-5124\"\r\nexpires: Sat, 26 Sep 2026 14:04:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20772,"size_decoded":19937,"mime_type":"image/png","magic":"PNG image data, 1047 x 150, 8-bit/color RGB, non-interlaced","md5":"8fc7e34eb4190eb7aa863fe4b70870ab","sha1":"dc40c751b6524219abc221bb44bce0e1a0c9a583","sha256":"81972891b7782d7b0d531da9da2d47c1458bda03cce58524e1a18ff880477b29","sha512":"c1a17302ea267ee1984baa205e223d3caa7c31851af938d37ba98595bfc491a7da9117bad6fb167db8c3c7b876107cdd8f8ed6dee7e806a40791b45ccb031e4e","ssdeep":"384:MLIMEG4ylqpEDKxRpHwB5Y9fHvOBV3aIJxih+eZs3WLCSuEWVhvN7jJny+9FqQ:MD1lqpscmSCx/LuUEWzZJP","tlshash":"00929c96c72456b013c5cf2a6b039cc9c44c382ffc1f06a047732ba7625b75e969ac6d","first_seen":"2025-06-16T06:13:20.590202Z","last_seen":"2026-08-27T14:05:38.832992Z","times_seen":69,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.x8-binance.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.x8-binance.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}