{"report_id":"619d3c65-5290-4c73-bda2-ead359e0f4da","version":6,"status":"done","tags":[],"date":"2026-02-03T19:07:27Z","url":{"schema":"https","addr":"dapp.univault.im/","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"dapp.univault.im/#/pages/index/tp","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"title":"UniVault","dom":{"size":79569,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29060), with CRLF, LF line terminators","md5":"c5d67c27ff9baefa021fa681a5888558","sha1":"1507cf7beb2e5c89c7744cd201fbd03225759a65","sha256":"e187148e594697e3424a7eb7bb837cd3d403eb6ad3a3bdc396fbc1f2efa46ef3","sha512":"6751780c1dbe12df072c6f84bf93c79ec27b71d06f67fa3dc71644ae84f065279ab2da80f9fa51609153752ebf30714a438bf23cd018bd21895ccfb1c2ebf715","ssdeep":"1536:oeCm+lwKOaWmKxZW/QJIlb+J7pj2Hx6TrCUpLFZ5sfhLsfLzsf4gsfBOrrxRco/o:7s1WmePX","tlshash":"7a734b72624d29a97333c84096d0d66cb516e723d5d20ce6fa5f1f3e8fd2ee50a52b08","dom_hash":"domhash9c4e5402675826ed9547d27132fe98cc","first_seen":"2026-02-03T19:07:33.930779Z","last_seen":"2026-02-03T19:07:33.930779Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dapp.univault.im/","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T19:07:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.univault.im","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"dapp.univault.im","ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-03T19:07:28.761964Z","last_seen":"2026-02-03T19:07:28.761964Z","alert_count":13,"request_count":13,"received_data":2952951,"sent_data":5854,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-01-28T12:24:09.896795Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dapp.univault.im/static/pages-index-index.1770085744981.js","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9291a532663cdff5de9ac3029c11eb33","sha1":"18e08d04e4d72cab1fc98e2abb88944783ccec24","sha256":"5dc77fd96e1ce8eed7d2873b05343fc809e4671cd8f0bac788450c62c873ed56","sha512":"823dcc530a2ac5e82134b2ae9f28b43afbf2cd8cc6df320a81142aeee6b30a47cb6d4a6aaf952a044d4690f07a1e8eff54a6fd7d5977fe3dc3160e72f965fb32","ssdeep":"768:36fogpo3r2t9FTxJII9htjS0uu1x2Yhcr63MFhhB6Vly:36ggpo3r2trTxJt9h9S0ucQYhcMQhGVQ","tlshash":"3c733a28b1c7f59e49835824106f791940767e79a411f4c0f3b6eef089b6d8e262bb7c","size":75998,"data":"","first_seen":"2026-02-03T19:07:33.994004Z","last_seen":"2026-02-03T19:07:33.994004Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/static/pages-index-tp.1770085744981.js","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f343d20197fb4665ae069a01e4c8e00e","sha1":"4c51717d182a6ad4aeee52b8408dda50f140e362","sha256":"9d424da33eed71d76db626fb018f4d4024bf6178bac80ceddb4df76d7d23a346","sha512":"2bdfa967c9a26453e29880acb0823170b02c84ac642b07319feb2f04d3412b907676bc4da7ca91571c04ee645418364c28bf3aa5956e7315e326898574c3afce","ssdeep":"","tlshash":"7241461cb285f0ed15ea6894013f2b0b903b6dbdba1abcc7c374e1c1897449e1137ab5","size":1889,"data":"","first_seen":"2026-02-03T19:07:33.977682Z","last_seen":"2026-02-03T19:07:33.977682Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"195e67c6c0fa2b9f407dfe6d363533f8","sha1":"ec6540b4a92d8b859b9f39136358ca8cf2125403","sha256":"40b0c0aa19a3862b97f2ed9f409a419049d2b8780cf301d9af166ae06f9223a0","sha512":"7de794eaffb1c2752391e34091a71d29c6fdd9edc63f893f171d15bc14d77c26f5159ce358bbf85d582119804e1b859d79157760103b5bbf68162ccaa19df68e","ssdeep":"","tlshash":"3ce0c0c360bf394c0220801a704ac1036bbe08b3efd248a11c9c3ba5cff9e4bc56a859","size":364,"data":"","first_seen":"2023-03-07T12:02:42Z","last_seen":"2026-06-02T03:49:00.206639Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/static/index.1770085744981.js","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcab6895bddadee889bb2ee91dc51780","sha1":"dba357985fe39fdaa6ef6ef0901c2c80d35cf488","sha256":"5ed82afe8e7ac7ea4925b4c9e946dab337c085f2cb7cd072793ed01321c8feb5","sha512":"2c1491db5a5651dfb7a5e6ba46deac80d760385a409dca29d5aa02171be3338fd8fc8e1a517fb75220e52b74bd48c71959d63458cbc4a823d8cb0a2273b1ad12","ssdeep":"1536:oW5RldLyik0e6I9T/JdzMueAQP0JDKHu/oETONlZ0cUv/GbjyjHT9gD0y2reCm+y:h1tY0YT/LzfNJFON0Ks1WmelR","tlshash":"20147ec9b18b75ce0fa2a954485b1100e0b5ad9668cde803f3a6d9b34ef658d4327f3c","size":192417,"data":"","first_seen":"2026-02-03T19:07:33.990059Z","last_seen":"2026-02-03T19:07:33.990059Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/static/chunk-vendors.1770085744981.js","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"50a92a26089573b902389c7200a6df93","sha1":"dc7a22bbbe82e4887d69131a392125b407748b0f","sha256":"0039d8522e410f60f2e7adf6b34163343f296ebee10f264d49357bbc0a395a1a","sha512":"8a0f5ed3f9c5cc138bb2b133efac1965e1fadafa0d2d12e8e400b7e3e31374674caaefa9780cf48f66d159da76b6a6dc98624443416c609fa3895c7dd432ff58","ssdeep":"49152:PF0s/y4XmI+Hu9Yk1+gwWolngFIoeGBKR:PF0YyUmI+HKXolnWIqKR","tlshash":"7495278d32c7f0a657e321b4002f200ab23a2d69684ea455f365e9d1fe79d5d9237f38","size":2031622,"data":"","first_seen":"2026-02-03T19:07:33.997083Z","last_seen":"2026-02-03T19:07:33.997083Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"dapp.univault.im/static/tabbar/icon4.png","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.univault.im/","date":"2026-02-03T19:07:08.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.univault.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:04:08 GMT","end":"Tue, 28 Apr 2026 10:04:07 GMT"},"fingerprint":{"sha1":"C3:51:AE:61:18:43:39:5B:6C:8A:B9:73:6F:58:9D:FF:74:A8:C0:8A","sha256":"27:74:83:B1:F0:5C:D9:04:79:6B:99:A8:1C:0D:B0:5F:F5:98:0B:B9:01:CF:5F:B3:2C:E6:B7:A6:6B:AA:6E:F9"}}},"request":{"raw":"GET /static/tabbar/icon4.png HTTP/1.1\r\nHost: dapp.univault.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.univault.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:07:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Feb 2026 02:30:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69815db1-5f9\"\r\nexpires: Thu, 05 Mar 2026 19:07:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1529,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"1a91257e2b02282d7c8f7355c6d56145","sha1":"a0ce9cf2b5d89e8c786a27c9fc11da3079c7ca3e","sha256":"5ec4324980c0b464f5d2f4765fe3edc543110d199c72ca24f9d9cf5987d68ba1","sha512":"3b9544481790d19ac0ec17768fdd9cd83a44d0fa36d442bb379e83126d6d90fa4a2a2c9a5d7b68d53a2f8afba5dcf02d2e50945f1861bf2138ee555230e2a143","ssdeep":"","tlshash":"54311c9b86dc0cede6a50218c90c8151f83d533dfb355be4fd9741184974ea45d0ca79","first_seen":"2026-02-03T19:07:33.935154Z","last_seen":"2026-02-03T19:07:33.935154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.univault.im","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/static/header-img-zh.e1ec522.png","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.univault.im/","date":"2026-02-03T19:07:08.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.univault.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:04:08 GMT","end":"Tue, 28 Apr 2026 10:04:07 GMT"},"fingerprint":{"sha1":"C3:51:AE:61:18:43:39:5B:6C:8A:B9:73:6F:58:9D:FF:74:A8:C0:8A","sha256":"27:74:83:B1:F0:5C:D9:04:79:6B:99:A8:1C:0D:B0:5F:F5:98:0B:B9:01:CF:5F:B3:2C:E6:B7:A6:6B:AA:6E:F9"}}},"request":{"raw":"GET /static/header-img-zh.e1ec522.png HTTP/1.1\r\nHost: dapp.univault.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.univault.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:07:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Feb 2026 02:30:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69815db1-800eb\"\r\nexpires: Thu, 05 Mar 2026 19:07:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":524523,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2250 x 2685, 8-bit colormap, non-interlaced","md5":"cc4aadec4f047aefedce693823dec29e","sha1":"639084e3857f3fd772907a3d1f525d6f6bf7f9af","sha256":"0d93ac059b9bfedfa850ee9f4166ddea3e0e13ee6a04808f44d1a99280992ab3","sha512":"c03eb66181fb0de5cb50c4b0cfeb5eaf8b1cf0df82b71f66580f3d860562d9724ad62fdfe6e730915f471826ed6c03b1af93cbb5c31876df2eee2a9ba0ff9dfc","ssdeep":"12288:LxWtK+d1dY0PkxycfmfB6zXm7yKChc6L8rkGDV3rT+KU6:LxItY0Pky4jmuS6MkWbT+K/","tlshash":"69b4239f5587aac8df3e8f9779c5d0ca70b21bae7a6008e51bcc08ad058d53264ce5c7","first_seen":"2025-03-31T13:37:00.630165Z","last_seen":"2026-08-07T14:13:36.754329Z","times_seen":41,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.univault.im","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/static/index.883130ca.css","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dapp.univault.im/","date":"2026-02-03T19:07:05.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.univault.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:04:08 GMT","end":"Tue, 28 Apr 2026 10:04:07 GMT"},"fingerprint":{"sha1":"C3:51:AE:61:18:43:39:5B:6C:8A:B9:73:6F:58:9D:FF:74:A8:C0:8A","sha256":"27:74:83:B1:F0:5C:D9:04:79:6B:99:A8:1C:0D:B0:5F:F5:98:0B:B9:01:CF:5F:B3:2C:E6:B7:A6:6B:AA:6E:F9"}}},"request":{"raw":"GET /static/index.883130ca.css HTTP/1.1\r\nHost: dapp.univault.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.univault.im/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:07:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Feb 2026 02:30:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69815db1-1793e\"\r\nexpires: Wed, 04 Feb 2026 07:07:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2de2f2d3943b4b382a28a439daff5939","sha1":"70d04e1c3567cb4f248b29046b98386f215a4d38","sha256":"8a35934d019c2b120a31ae6c51c75b2327f22637824b2a2c2faf4ce17ae9d4d8","sha512":"eba9271e30d6e4b21954078e3ccd839a55e1dcc8212fa375c18dce42104d19a92655c2f289401525b0c9565971a31573b928666515a3ca89b1801bbd48c1de95","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:VApuK7hmVrS1Wu3iG41nrPI","tlshash":"f393f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-07-20T12:48:29.443135Z","last_seen":"2026-08-12T09:44:41.395371Z","times_seen":5220,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":696,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.univault.im","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/static/tabbar/icon2.png","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.univault.im/","date":"2026-02-03T19:07:08.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.univault.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:04:08 GMT","end":"Tue, 28 Apr 2026 10:04:07 GMT"},"fingerprint":{"sha1":"C3:51:AE:61:18:43:39:5B:6C:8A:B9:73:6F:58:9D:FF:74:A8:C0:8A","sha256":"27:74:83:B1:F0:5C:D9:04:79:6B:99:A8:1C:0D:B0:5F:F5:98:0B:B9:01:CF:5F:B3:2C:E6:B7:A6:6B:AA:6E:F9"}}},"request":{"raw":"GET /static/tabbar/icon2.png HTTP/1.1\r\nHost: dapp.univault.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.univault.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:07:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Feb 2026 02:30:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69815db1-75e\"\r\nexpires: Thu, 05 Mar 2026 19:07:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1886,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"d13315d1d45ba9dd7818e1ec18ef9cc8","sha1":"bbf454dc3f0bd034f5bfd14473d936b8195b6746","sha256":"8744d575e0b220cdc4e3a85df5802f0363764dc0d220f6f018b110d6cb5ce3bf","sha512":"646cea5b4a47d43715e16078656ab5969b7e25b924423290b531822ffcd2ecd8281c3c7b5184cbfd38215efc14c9908a75b885467f804891dcc6ef57f7f09ce7","ssdeep":"","tlshash":"4f415d53d5c8202bc47d632de1db9a2f88371b38491853f419ccced76aa4f542ebc514","first_seen":"2026-02-03T19:07:33.951264Z","last_seen":"2026-02-03T19:07:33.951264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.univault.im","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/static/tp.png","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.univault.im/","date":"2026-02-03T19:07:08.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.univault.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:04:08 GMT","end":"Tue, 28 Apr 2026 10:04:07 GMT"},"fingerprint":{"sha1":"C3:51:AE:61:18:43:39:5B:6C:8A:B9:73:6F:58:9D:FF:74:A8:C0:8A","sha256":"27:74:83:B1:F0:5C:D9:04:79:6B:99:A8:1C:0D:B0:5F:F5:98:0B:B9:01:CF:5F:B3:2C:E6:B7:A6:6B:AA:6E:F9"}}},"request":{"raw":"GET /static/tp.png HTTP/1.1\r\nHost: dapp.univault.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.univault.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:07:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Feb 2026 02:30:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69815db1-33ec\"\r\nexpires: Thu, 05 Mar 2026 19:07:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 345 x 312, 8-bit/color RGBA, non-interlaced","md5":"01e819d8813ffa29cb554e7d11c207a1","sha1":"a4f757dd9b3ae1f2b84ae368cb1009796584a586","sha256":"e8c37f56d9442654283bb6addc4780277a2d427017117f60daf851087d7a4742","sha512":"ca5e2b13de4105ecc380f165d2f18678d861c0e7d90f20fb45a4fef7cbbe4c7865242d97f1c66d59f98edd8dd52ec20db5ab31d073d5ecb33dc7c4a32a3e1b50","ssdeep":"384:859TFdjNVvvYtVNwsomImfk8D2q6dRyvtqt:Iv/vQt3wdmHgdA1a","tlshash":"2352c1f6cbeddd314a6fb3a9d991633318fcd89d19a00b59e50f509ef35090e6211171","first_seen":"2026-02-03T18:51:33.636166Z","last_seen":"2026-02-03T19:16:49.256086Z","times_seen":4,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.univault.im","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.univault.im/","date":"2026-02-03T19:07:09.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.univault.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:07:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Wed, 04 Feb 2026 15:07:10 GMT\r\ncache-control: max-age=72000\r\nset-cookie: __uni__uid=rBEQVWmCR16//8+9AxIyAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-12T09:30:15.371369Z","times_seen":20205,"resource_available":false,"data":null}},"time_used":1373,"timings":{"blocked":556,"dns":1,"connect":263,"send":0,"wait":261,"receive":0,"ssl":290},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/static/tabbar/icon1_check.png","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.univault.im/","date":"2026-02-03T19:07:08.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.univault.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:04:08 GMT","end":"Tue, 28 Apr 2026 10:04:07 GMT"},"fingerprint":{"sha1":"C3:51:AE:61:18:43:39:5B:6C:8A:B9:73:6F:58:9D:FF:74:A8:C0:8A","sha256":"27:74:83:B1:F0:5C:D9:04:79:6B:99:A8:1C:0D:B0:5F:F5:98:0B:B9:01:CF:5F:B3:2C:E6:B7:A6:6B:AA:6E:F9"}}},"request":{"raw":"GET /static/tabbar/icon1_check.png HTTP/1.1\r\nHost: dapp.univault.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.univault.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:07:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Feb 2026 02:30:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69815db1-695\"\r\nexpires: Thu, 05 Mar 2026 19:07:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1685,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"f84150a87c756280914ac7419b805009","sha1":"7a3e005ed3ed223f086c8611e4494e45ea4ce7e8","sha256":"d0925c6ad3d350139b6c4a3f918a1c1eac8646bced57d4eaa9602519c3402749","sha512":"bc8a64743be3dcc60ca61171cb39e9cb1538fd213473a4c3a64c8e6537c2367778df6d8ca5ea2eb979e660c38911c749e9d6392ce32fa19e780284b6137841a7","ssdeep":"","tlshash":"0c31fa360b2057b9dc721a06c189563ab9c32d6b60624a1674a531e87922e992a2e391","first_seen":"2026-02-03T19:07:33.971741Z","last_seen":"2026-02-03T19:07:33.971741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.univault.im","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/static/tabbar/icon3.png","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.univault.im/","date":"2026-02-03T19:07:08.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.univault.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:04:08 GMT","end":"Tue, 28 Apr 2026 10:04:07 GMT"},"fingerprint":{"sha1":"C3:51:AE:61:18:43:39:5B:6C:8A:B9:73:6F:58:9D:FF:74:A8:C0:8A","sha256":"27:74:83:B1:F0:5C:D9:04:79:6B:99:A8:1C:0D:B0:5F:F5:98:0B:B9:01:CF:5F:B3:2C:E6:B7:A6:6B:AA:6E:F9"}}},"request":{"raw":"GET /static/tabbar/icon3.png HTTP/1.1\r\nHost: dapp.univault.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.univault.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:07:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Feb 2026 02:30:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69815db1-77d\"\r\nexpires: Thu, 05 Mar 2026 19:07:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"f672da8e75aa86119c820b2569dfcdfa","sha1":"687308855221fb59701c3e512eb8c8d06aea52d4","sha256":"af122b7112e2523c44ed3215b7ece479b8956b24dc9ce0d33ec3c0ea0270d316","sha512":"bee9beec5910f4585e7bef340c59a9bc291ba690af4daff17cfde480f2a517d53ddca279057a1a862af07f0aa251ea60e1dfc8e7335e99df5bbbf4bd385ae19e","ssdeep":"","tlshash":"9f415bca92c396defca6bb13c68d47486c31001c13a220e4835866e780baf62f40d6ce","first_seen":"2026-02-03T19:07:33.975208Z","last_seen":"2026-02-03T19:07:33.975208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.univault.im","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/static/pages-index-tp.1770085744981.js","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.univault.im/","date":"2026-02-03T19:07:08.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.univault.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:04:08 GMT","end":"Tue, 28 Apr 2026 10:04:07 GMT"},"fingerprint":{"sha1":"C3:51:AE:61:18:43:39:5B:6C:8A:B9:73:6F:58:9D:FF:74:A8:C0:8A","sha256":"27:74:83:B1:F0:5C:D9:04:79:6B:99:A8:1C:0D:B0:5F:F5:98:0B:B9:01:CF:5F:B3:2C:E6:B7:A6:6B:AA:6E:F9"}}},"request":{"raw":"GET /static/pages-index-tp.1770085744981.js HTTP/1.1\r\nHost: dapp.univault.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.univault.im/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:07:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 02:30:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69815db1-761\"\r\nexpires: Wed, 04 Feb 2026 07:07:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1889,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1889), with no line terminators","md5":"f343d20197fb4665ae069a01e4c8e00e","sha1":"4c51717d182a6ad4aeee52b8408dda50f140e362","sha256":"9d424da33eed71d76db626fb018f4d4024bf6178bac80ceddb4df76d7d23a346","sha512":"2bdfa967c9a26453e29880acb0823170b02c84ac642b07319feb2f04d3412b907676bc4da7ca91571c04ee645418364c28bf3aa5956e7315e326898574c3afce","ssdeep":"","tlshash":"7241461cb285f0ed15ea6894013f2b0b903b6dbdba1abcc7c374e1c1897449e1137ab5","first_seen":"2026-02-03T19:07:33.977682Z","last_seen":"2026-02-03T19:07:33.977682Z","times_seen":1,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.univault.im","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/favicon.ico","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.univault.im/","date":"2026-02-03T19:07:08.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.univault.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:04:08 GMT","end":"Tue, 28 Apr 2026 10:04:07 GMT"},"fingerprint":{"sha1":"C3:51:AE:61:18:43:39:5B:6C:8A:B9:73:6F:58:9D:FF:74:A8:C0:8A","sha256":"27:74:83:B1:F0:5C:D9:04:79:6B:99:A8:1C:0D:B0:5F:F5:98:0B:B9:01:CF:5F:B3:2C:E6:B7:A6:6B:AA:6E:F9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dapp.univault.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.univault.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:07:09 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4292\r\nlast-modified: Wed, 28 Jan 2026 11:00:46 GMT\r\netag: \"6979ec5e-10c4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4292,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"a0c2d74d61aac34227c9c509e6d320e5","sha1":"ac7c55b10d59e5cfac099fc5cf5baa21a91f3c1e","sha256":"2f7cbf2fa3eabcc0267f082f11881239278a0fd304466633799937d7894ad397","sha512":"469b5a60b4c05cb13c191aac7d03fb9dc8f539744061e928c8b240faafe01abffba5678c9b3cd651df19b05e763151ba77b08c55d88751ce37c61a9b822642c5","ssdeep":"96:pSmNKPqnG/v7HqeJZ72pcyzzne5MlZEnKSRWOXdFDff:pSmsqnwqeP2pcyzJlBSTR","tlshash":"f9917dbbf616892dcf489fd30c858052e0a24128d6d6fe33e5571fbc8236aa44c34ec1","first_seen":"2026-02-03T19:07:33.979963Z","last_seen":"2026-02-03T19:07:33.979963Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.univault.im","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T19:07:04.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.univault.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:04:08 GMT","end":"Tue, 28 Apr 2026 10:04:07 GMT"},"fingerprint":{"sha1":"C3:51:AE:61:18:43:39:5B:6C:8A:B9:73:6F:58:9D:FF:74:A8:C0:8A","sha256":"27:74:83:B1:F0:5C:D9:04:79:6B:99:A8:1C:0D:B0:5F:F5:98:0B:B9:01:CF:5F:B3:2C:E6:B7:A6:6B:AA:6E:F9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dapp.univault.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:07:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 893\r\nlast-modified: Tue, 03 Feb 2026 02:39:37 GMT\r\netag: \"69815fe9-37d\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":893,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"efb2f0c11f5d8a161e8e130bbb4130b9","sha1":"d49d966190401f30d9b756c49e7a14f1398858e8","sha256":"57c2786a51331140eccbb55c756b05a63ae6f02727fa3e37fbe3f84872e100e8","sha512":"48279ab5f6bf567859e9a100428e7612668184a11d7c807df1ef41f4706976dcec68a4e4b7cd320769e6b436553db3d14035642fec852ec43d6b5731d0e28c95","ssdeep":"","tlshash":"6011c4863c44f70d0720814720b7d15d855b8db4b7a0586348d52ebb56e5749ce1f454","first_seen":"2026-02-03T19:07:33.982757Z","last_seen":"2026-02-03T19:07:33.982757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1904,"timings":{"blocked":773,"dns":66,"connect":349,"send":0,"wait":355,"receive":0,"ssl":358},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.univault.im","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/static/chunk-vendors.1770085744981.js","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.univault.im/","date":"2026-02-03T19:07:05.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.univault.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:04:08 GMT","end":"Tue, 28 Apr 2026 10:04:07 GMT"},"fingerprint":{"sha1":"C3:51:AE:61:18:43:39:5B:6C:8A:B9:73:6F:58:9D:FF:74:A8:C0:8A","sha256":"27:74:83:B1:F0:5C:D9:04:79:6B:99:A8:1C:0D:B0:5F:F5:98:0B:B9:01:CF:5F:B3:2C:E6:B7:A6:6B:AA:6E:F9"}}},"request":{"raw":"GET /static/chunk-vendors.1770085744981.js HTTP/1.1\r\nHost: dapp.univault.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.univault.im/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:07:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 02:30:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69815db1-1f000e\"\r\nexpires: Wed, 04 Feb 2026 07:07:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2031630,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20510)","md5":"90104a4c43703a965ca3b2e42ab3423a","sha1":"ca851b4f844feed1ab7da359d9eb4fe7cf5147f6","sha256":"ca2c14f7c40e10590c4fec7ddb5eed04829c991c8c2b21f80d135168cafe971a","sha512":"fd0642a87ceb9efcb49de83017f57ae5799ecab97e8eb4ccb81a75ce5acac0c9a8abca7d8061f16bf59a1e2df0a8783ed7f9edf186ffea3431cb359af5084d92","ssdeep":"6144:Mr3WkEF3FIJwLa6011OdT+Q32sqQjvZDnCyyxVKkdYsSFf4tn32u7SGHwaaXm0Kn:MrGtFIJsmZQ9AdBwXm26y+oAmhqu9Y/N","tlshash":"6a3539cd32c7f0a667e320a4002f200ab27a2d69644e6851f375d9d2be79d5d9237f39","first_seen":"2026-02-03T19:07:33.985135Z","last_seen":"2026-02-03T19:07:33.985135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":696,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.univault.im","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/static/index.1770085744981.js","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.univault.im/","date":"2026-02-03T19:07:05.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.univault.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:04:08 GMT","end":"Tue, 28 Apr 2026 10:04:07 GMT"},"fingerprint":{"sha1":"C3:51:AE:61:18:43:39:5B:6C:8A:B9:73:6F:58:9D:FF:74:A8:C0:8A","sha256":"27:74:83:B1:F0:5C:D9:04:79:6B:99:A8:1C:0D:B0:5F:F5:98:0B:B9:01:CF:5F:B3:2C:E6:B7:A6:6B:AA:6E:F9"}}},"request":{"raw":"GET /static/index.1770085744981.js HTTP/1.1\r\nHost: dapp.univault.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.univault.im/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:07:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 02:30:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69815db1-2efa1\"\r\nexpires: Wed, 04 Feb 2026 07:07:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":192417,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64802), with no line terminators","md5":"bcab6895bddadee889bb2ee91dc51780","sha1":"dba357985fe39fdaa6ef6ef0901c2c80d35cf488","sha256":"5ed82afe8e7ac7ea4925b4c9e946dab337c085f2cb7cd072793ed01321c8feb5","sha512":"2c1491db5a5651dfb7a5e6ba46deac80d760385a409dca29d5aa02171be3338fd8fc8e1a517fb75220e52b74bd48c71959d63458cbc4a823d8cb0a2273b1ad12","ssdeep":"1536:oW5RldLyik0e6I9T/JdzMueAQP0JDKHu/oETONlZ0cUv/GbjyjHT9gD0y2reCm+y:h1tY0YT/LzfNJFON0Ks1WmelR","tlshash":"20147ec9b18b75ce0fa2a954485b1100e0b5ad9668cde803f3a6d9b34ef658d4327f3c","first_seen":"2026-02-03T19:07:33.990059Z","last_seen":"2026-02-03T19:07:33.990059Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.univault.im","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.univault.im/static/pages-index-index.1770085744981.js","fqdn":"dapp.univault.im","domain":"univault.im","tld":"im"},"ip":{"addr":"68.183.227.168","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.univault.im/","date":"2026-02-03T19:07:08.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.univault.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:04:08 GMT","end":"Tue, 28 Apr 2026 10:04:07 GMT"},"fingerprint":{"sha1":"C3:51:AE:61:18:43:39:5B:6C:8A:B9:73:6F:58:9D:FF:74:A8:C0:8A","sha256":"27:74:83:B1:F0:5C:D9:04:79:6B:99:A8:1C:0D:B0:5F:F5:98:0B:B9:01:CF:5F:B3:2C:E6:B7:A6:6B:AA:6E:F9"}}},"request":{"raw":"GET /static/pages-index-index.1770085744981.js HTTP/1.1\r\nHost: dapp.univault.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.univault.im/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:07:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 02:30:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69815db1-128de\"\r\nexpires: Wed, 04 Feb 2026 07:07:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75998,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62108), with no line terminators","md5":"9291a532663cdff5de9ac3029c11eb33","sha1":"18e08d04e4d72cab1fc98e2abb88944783ccec24","sha256":"5dc77fd96e1ce8eed7d2873b05343fc809e4671cd8f0bac788450c62c873ed56","sha512":"823dcc530a2ac5e82134b2ae9f28b43afbf2cd8cc6df320a81142aeee6b30a47cb6d4a6aaf952a044d4690f07a1e8eff54a6fd7d5977fe3dc3160e72f965fb32","ssdeep":"768:36fogpo3r2t9FTxJII9htjS0uu1x2Yhcr63MFhhB6Vly:36ggpo3r2trTxJt9h9S0ucQYhcMQhGVQ","tlshash":"3c733a28b1c7f59e49835824106f791940767e79a411f4c0f3b6eef089b6d8e262bb7c","first_seen":"2026-02-03T19:07:33.994004Z","last_seen":"2026-02-03T19:07:33.994004Z","times_seen":1,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.univault.im","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}