{"report_id":"b728e4b1-3874-47f1-a443-8bea07239e7f","version":6,"status":"done","tags":[],"date":"2026-01-26T04:30:55Z","url":{"schema":"http","addr":"m.lmasv.xyz","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.130","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"m.lmasv.xyz/#/","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"title":"Home","dom":{"size":174362,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47521)","md5":"e9a4739080df4deacbc4f42b110b5aba","sha1":"93d55d7d45bfc6db16525aa2705c9150dc6bc9aa","sha256":"7c327e43eb75671e242b4699d2ec4a2941df5cd1cef5eef2ca5d769d24fe393a","sha512":"06cbbcb0f929444ffe210c6efa3cf036b9b09d1728d37829136a70f10b024ca4a1698c27f78c3f174b3db22d2678bf0dc91d2582c5d7d459c6cbb94ad04e866f","ssdeep":"3072:NjBAkZXwG1ZAIkKDJ3bys5XrHeU05TqWb+RHnURvedfviV98lp9l/ilCYSTF8c6X:NjWkZXwG1ZAIkKDJ3bys5XrHeU05TqWz","tlshash":"2804a36654a2211754334980e7cccf6c5728d7a398724cef738a291b8f82bed27da317","dom_hash":"domhash4bad82aadfb7e8fe34437e4f1125eda6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m.lmasv.xyz","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"104.21.90.130","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-02T04:30:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-25T22:25:20.721908Z","alert_count":0,"request_count":1,"received_data":1036,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.huobi.pro","ip":{"addr":"108.157.229.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-19","domain_rank":3114416,"first_seen":"2017-09-16T11:43:47Z","last_seen":"2026-01-24T14:55:37.7114Z","alert_count":0,"request_count":1,"received_data":476,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"m.lmasv.xyz","ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-20","domain_rank":0,"first_seen":"2026-01-26T04:30:57.902083Z","last_seen":"2026-01-26T04:30:57.902083Z","alert_count":38,"request_count":38,"received_data":3166616,"sent_data":18324,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-01-21T11:55:18.622959Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"m.lmasv.xyz/static/js/index.33d42a20.js","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"678311d65af41423532eb3eec0e19755","sha1":"ec6b0d4806016831730b9951f2c5b42e8f1f8a2f","sha256":"6bbb4a08691e4f35929aeeeb5dc41ac6db9b2b079cfa08a1baad52ef14b5f02c","sha512":"54b3a60d84a07698e07d8842e4ff406b5fe21283068fcf6f62c277d8c146cf25c4356328c44b1105ee5362f7e00d2f788e9820d97dd197810de2803ea35da163","ssdeep":"24576:oZXwG1ZAIkKDJ3bys5XrHeU05TkGNz6lLLkOtK:wGQlLe","tlshash":"c9057dcc35ca53f501320242decfa91827709ee77c9a644763b4b64d1f5a7cae663326","size":811296,"data":"","first_seen":"2026-01-26T00:24:35.270654Z","last_seen":"2026-01-26T05:10:21.544785Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/js/chunk-vendors.e28c671a.js","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c71688be8ff532568c6fad757598e77","sha1":"a8555c4033a0ef816dfd4efc813f602262c835ac","sha256":"37954a18d83b278a7f006b2ea8e63f837d91e04c1bba676a1a1fe4434cdaaadc","sha512":"91d66db9359561c8fbe63a873dc1e42533ca5ffa53dd84020f0c86aa9af71baebfa65b1a6b31e69367098214212bd2e937ac0dfb9445d4661de64ca4ea3b70bb","ssdeep":"12288:UQqw8GTmOHkdsIORuv4zZ5caftZ4l2qFxakykQ6GABFUJEF1b:UQ45OHkd9ORfz0afj4l12cNJj","tlshash":"a965078cf2c6b0a916e720f5402f220bb2776969b40f8495f675e8d1ad7894e1237f3d","size":1489319,"data":"","first_seen":"2026-01-26T00:24:35.272579Z","last_seen":"2026-01-26T05:10:21.546177Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/js/pages-home-home.86a88ea6.js","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7963e4948880a11fa949ad3f40827a5","sha1":"00b436363616ebef7f1ed29c7304ec02d616cb31","sha256":"e96045b90a410b25289ef3803e8e236b2da6d07cf06c34dc11e062257cda3712","sha512":"d397b8e29fb4a2799efaee5abe6b115b0159f778f86e79f6f1b4816b6a0babcb36c830a9385c68bec8cb8de52692c817ff0a332f09473471333679a988e705ec","ssdeep":"1536:rzFnPrZf5LXe+6HlSMRh1+RHnURvedEzhjPbGb8OummmNjN:lPlfTMRv+RHnURvedElvCRmYZ","tlshash":"d523e71cb18bf82b4ad364b4241f1419e1363e989425f081d7f5daf68eb1a8f172af4d","size":49596,"data":"","first_seen":"2026-01-26T00:24:35.244805Z","last_seen":"2026-01-26T05:10:21.539961Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/js/pages-IEO-IEO~pages-IEO-detail~pages-IEO-history~pages-bitcoin-bank~pages-bitcoin-bankDetail~pages-b~88ce9424.404997aa.js","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"865c9247fc3cafb92d44cafa6760f84d","sha1":"c53e9763bea6340a356b0080f3d0c60dc6c46c28","sha256":"b0a39b699fbb6a95ee9181cf3ea4d113040188b728e47dc15e9d17ffbeb56b54","sha512":"2f31cab37476d229cab61a1132c64df132c1d6feff9b68c92a781ac07c7a537b08a28fda11b732cfa044324728aab0e03cfa7901ca08578cb528b3c30d6dfef9","ssdeep":"3072:Qci+xq5fBeQOqZA4WDwswsqoHdhscsjF5Co5KGZ:QU8fHOA+wsMF5CokGZ","tlshash":"5924295c3146f45b07c35825a42f230661263d1fd849b988f7e2a9ef8a7ca5d3267b3c","size":228263,"data":"","first_seen":"2026-01-26T00:24:35.274294Z","last_seen":"2026-01-26T05:10:21.516315Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6671508dad6f02acfd99868697603f3","sha1":"e736363e5887d9f95be87141d50ff216e693f792","sha256":"9bd6cfdfd948e8398407c7bf91417813afdb9d27346615d41b6e58905611d1a9","sha512":"2244d3425be07565be1365e14e3f8edc4fa3183d3c2d1ed064569f8fd641b958811a293683a920b174facf20730291c9f0ac9e72670f3cb24e6793cc0800a471","ssdeep":"","tlshash":"a9e0618250a72d1c11218325358d9c131f750577dec14d413c8c27684f68f0ac05f808","size":409,"data":"","first_seen":"2026-01-26T00:24:35.268965Z","last_seen":"2026-05-25T07:32:40.472681Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/polyfill/v3/polyfill.min.js?features=default","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"435a451090061be4c0254761f2f94e1f","sha1":"1a873f8c9a0dfb421e3213dfbbfa8aafa9960d4c","sha256":"6c68769e8470ce89a0f2270529a5d47db00917e3ef9df946dca202098f09d0a2","sha512":"0506dbdede1f984b75421ec86cdd451752ec85b44f5a6f880bc0f06bf8884f1f934f4eafad41ed89015d2118a73bd4dcb20ad4b0d2118e16f311aa25737cf1ab","ssdeep":"","tlshash":"43b012a448824f95eae305c0485602851baf5fc95405d318ce72a41cc862845b2ccc6c","size":104,"data":"","first_seen":"2023-12-16T06:03:22Z","last_seen":"2026-06-07T19:47:37.673514Z","times_seen":23603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/tab/icon_home_active.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/tab/icon_home_active.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-ab3\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVKSwk%2B6LRnJvGnDQn53AQpqixG9sukKEzvfng4u7Gn4SnARWAz8aWg%2FzUp4gPpixeBcLLygYUw7X2hIdS4svx7HrGxEGbrgxqBt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d469f7950a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2739,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"b1b87a6876b2c60990574150e89180cf","sha1":"53500dfbb709428debd3bf09b0781f59fbf57f45","sha256":"d91492c6e780bf0b7ede3e44ca7e21847b86e4b39742d25edef0bb1289604a77","sha512":"3d3ae328c14a6b6bc5d70b28e871ade8b5fc7e0e14b845309e78086c60ccdbcd345fee175f18ab9c1856c31f0c228bed9ad474e7be31c663af7fcd1d79582b46","ssdeep":"","tlshash":"a351b35ffe616c01a38cee457ee5a2979a3786805981b482fccd5883c4a10f4ccaedc7","first_seen":"2023-09-16T07:24:25Z","last_seen":"2026-05-16T17:12:27.243587Z","times_seen":176,"resource_available":false,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/home/icon_down.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:36.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/home/icon_down.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-130d\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=axfgb2soqcAPCADRltLCwfAyTasIO9Gf2pI0IamKZ01c5EIxHgFYdMLDI8r0Kxi%2BNI3elhAJXJBz61W0b3aSOU6cJI%2FSwPNz41aA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46a4397da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4877,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"97d304a3299a65c92e5aba67de3b8553","sha1":"5f61758edf06caca67d064a2bf0f283b028c7aed","sha256":"c07cceafdde2b9452bd5efd35819891b92252e48c01169040e4496eb05ac23b9","sha512":"5aafa6d6971fd71b1c78ac8e22ee845386bce2dbff65fc635ddf3c88b1314133dbb72e28f5371f34c7aa9848c790577f3cf50b5ef0ac9fae32f995f450a835ab","ssdeep":"96:nllcHitlIxv9vk7C1+I4wWHLihk/xLe6ho4I4WCcbq/VB84fLxeJ9:MIIHUCD4watevnJTq/VOqm9","tlshash":"51a16c9dcc15025c00de0ed8397fae899e6c900517a12e28a9abc74f8118f52fd36e3e","first_seen":"2024-12-14T12:36:36.134813Z","last_seen":"2026-01-26T05:10:21.514436Z","times_seen":4,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":683,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:37.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 26 Jan 2026 04:30:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Mon, 26 Jan 2026 15:30:38 GMT\r\ncache-control: max-age=39600\r\nset-cookie: __uni__uid=rBEQVWl27e4LPy+JA27yAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-06-07T21:35:15.761776Z","times_seen":16206,"resource_available":false,"data":null}},"time_used":1690,"timings":{"blocked":702,"dns":39,"connect":285,"send":0,"wait":285,"receive":0,"ssl":376},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/polyfill/v3/polyfill.min.js?features=default","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:34.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /polyfill/v3/polyfill.min.js?features=default HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 04:30:34 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 9c3d4699ef0b4e4c-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 26629\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 02 Feb 2026 04:30:34 GMT\r\nlast-modified: Sun, 25 Jan 2026 21:06:45 GMT\r\nstrict-transport-security: max-age=15780000\r\nvary: User-Agent, Accept-Encoding\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncf-polyfill-version: 3.111.0\r\nx-compress-hint: on\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CWIk3Nv%2BivrFt5TfP%2B02jEua5uaf3Zxc2Jy%2FRMf%2FosdAJcm%2F7WwXxRbweUx1dUKpoFWv9vlj2EHti0PxP8RynQakAhN2Wy9%2BFHIbtyg5nthsdyD7ungPTmXQdwCoHz3KNhh%2BzZze\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text","md5":"435a451090061be4c0254761f2f94e1f","sha1":"1a873f8c9a0dfb421e3213dfbbfa8aafa9960d4c","sha256":"6c68769e8470ce89a0f2270529a5d47db00917e3ef9df946dca202098f09d0a2","sha512":"0506dbdede1f984b75421ec86cdd451752ec85b44f5a6f880bc0f06bf8884f1f934f4eafad41ed89015d2118a73bd4dcb20ad4b0d2118e16f311aa25737cf1ab","ssdeep":"","tlshash":"43b012a448824f95eae305c0485602851baf5fc95405d318ce72a41cc862845b2ccc6c","first_seen":"2023-12-16T06:03:22Z","last_seen":"2026-06-07T19:47:37.673514Z","times_seen":23603,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":17,"dns":1,"connect":2,"send":0,"wait":16,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/home/icon_coin_token.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:36.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/home/icon_coin_token.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-1309\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SpV9KmFuW93y8LlMXg5oRDap50dR2kQNbrFjEliUChjKeaAuCPDydJM8OgonxhcY4AzdWJpV8Li0PeDCJccxPpLG%2FGHzK5lNDtYN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46a4297ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4873,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"e89b38aa645c015f2d80997da6f3ba08","sha1":"3945c7dbce3379436d370ebd16a9e12f06bf13ee","sha256":"74e730cfc19f00018c8e6f3ddd4b81dbb0c0dd64196d5b95cdd055226a92edcf","sha512":"6e4df7d3b4890fbac983f854323c25c074e6da63f5aebcb53e56bb7fdbcf361399d89c4d54c9dee2d9060ed80a42ca1e39cd493fe3d6a7bffc035f727c63a511","ssdeep":"96:4YkknmWIM87/EHAUDz+YZpTHiutt4uQfkuiPnF3j9nolnu+gTIVJ:JkkndNgYz+cCu4ului/Lnolnv40J","tlshash":"24a16ca3f691798117096e832fdfd99b4d268a0005e29859f8fd5c1391260fe5cdced3","first_seen":"2023-09-16T07:24:25Z","last_seen":"2026-03-22T13:21:27.943176Z","times_seen":166,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":696,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/api/base/tradelist","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"POST /api/base/tradelist HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nX-Token: \r\nlang: en\r\nContent-Length: 34\r\nOrigin: https://m.lmasv.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"from\":1,\"page\":1,\"pageSize\":100}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGyIK08FCsmJK2MDqrIvpDivBC8KNd%2FWE%2B%2BTWEBV9lMkQ%2FQVM53uCZ0FPAHkSRNyf0D%2F74Qzp29hSt5iw%2FDukGLkdaTssBgs2oZv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d469de916a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5573,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5987cd1ed849039caca9c93834572ce1","sha1":"25939661b20065806122a2426837b64097de581c","sha256":"19faba0de0abacf95bf43066ee850e1dad30845cdd593c4ea2d4f301bfb5661e","sha512":"6f606a01893b7de14fd6dd0e2c43500b9288593409a86c8a3800ef689a32190f01810c99b609d35821970e2e3604f3edac59e2bd3bb6def6fb3323dcd2b19a1b","ssdeep":"96:e9LbPeVadcu5KtIiQ3X0CGF7RVPLYPdIjlp5JqLgalyhpWV0c8t4wqt2jbqaZSSG:eZs+CyMp2epWgdD175YSb8dH","tlshash":"57b1421fd7adc5796b1b20d268c33fd1248a715b9dc98a08e3d3edc6c26036f684b618","first_seen":"2026-01-26T04:31:01.732532Z","last_seen":"2026-01-26T04:31:01.732532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/other/icon_image_loading.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/other/icon_image_loading.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-14ba\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YtjVEf2XFn%2FW6ySo0D6sZ1BC9fkZ7k8DzZGg9i0K2yF2lpME8%2FHjau17HSswC%2FKUPTSqcyv53avcRxyVxcwpiQmP88k%2FArYFxprw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d469f594ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 164 x 128, 8-bit/color RGBA, non-interlaced","md5":"0dc565d669ea7e2f32fd90c424176207","sha1":"741edf4f2f2fd8b7a75b6d142f2a35ec61a6ecab","sha256":"1bf17c01824b2ef98721ffb650cd64137c4251ffa354de4694841b5a5cb50c77","sha512":"d240b7d1f9c44427ef97a3f3d4c43773a40808843fd1b8c4fdf578fd6b6d7ae7b4b99038adff460c0aa5ee07803f098c25e18248ebc216247637beccac61a1ea","ssdeep":"96:+mnnvd4mZj4ueGenLU6SfNad2wAV8nkwldOzrmwXVmlpoVPUy:Hvd3jlGHT2knkUQ1Vm2Ph","tlshash":"73b17df095e859089cd702bf59838487068c139e3fd053396a3cab85c56f46399a55be","first_seen":"2024-11-25T11:23:51.823681Z","last_seen":"2026-02-03T17:30:08.730302Z","times_seen":7,"resource_available":false,"data":null}},"time_used":698,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":698,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/tab/icon_property.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/tab/icon_property.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-6b4\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23FzEwKv5dzr8PQqk1cyOnOtZ5qyi%2FZ4OB5yg6KXf8rt19O90iyR%2B0p8kP0iFgF2D4ZNaNYicILJdSRxEGYlWBaOQi71GOldCjc%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d469f8955a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1716,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"9a21719103783d2a4a86efaafa58a0cb","sha1":"ee63b87a91f7bfefe0f3d2dcd9f355c22556f615","sha256":"def832d73b60afbaaa57b1666d316a1589c4bc4a8116b89f3efa7b71566215a3","sha512":"b8e69abdbffec49f7462bc7485c427acf9d886ba2b7be6294923ea28e339e7ef68e37bfc110783128567057a897ccd1e1ee7f57157ab15bb5a771f298d6a0959","ssdeep":"","tlshash":"9131d68dfa86f5824048918119f280e2b9178690eda0e050f9cee457cc351f151feccf","first_seen":"2023-07-15T10:38:22Z","last_seen":"2026-05-16T17:12:27.264675Z","times_seen":246,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/home/icon_IEO.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:36.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/home/icon_IEO.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-1864\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aa8qnz7ojsfEfvasErMkhREl80vzUouDEDSVmUB2XQydWbi81rXk%2BBYGUYZZTZ3UAzJgiTT27IsuecNbcRTqkfhqe1PZLm7RPojR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46a4097aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"6736f3ceb9a578a658a2268370b19659","sha1":"3e765604afbbbaef14e21a42869fa294295dbaeb","sha256":"87de36cdfe974eb67227ec9ab321147ec2876d0d710b23b70dccfc5b1bcf109d","sha512":"4286b8a9ade1afbb2ff43afee60a837beb3932710063280de118a3de07c32803f09fb4db34b705d36c7c68fdc7431a3e0bb09981b75667f818a4fffe6de2f31e","ssdeep":"192:JkkndLgkzSjGXadVpi1IQqsAGWInHWPKl3Y67yb/:Bn1FzSjGWnQCIn26IQW","tlshash":"4ad18e4cd551bd66a385a1bcdeec42abc722d74056c4e0099ce81d226c718f29e6deca","first_seen":"2023-09-16T07:24:25Z","last_seen":"2026-03-22T13:21:27.931582Z","times_seen":144,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/home/icon_customer.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:36.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/home/icon_customer.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-d86\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DKoRjQS%2B1%2BH0ReW3kcVMMsTfxQ%2B0yvZrB0O5zP1CQkgRpeRQ%2FNyhTlZJTlRRDbsXv7MxpkUaDTFFND1T4tUJWB8sb2n%2BYOx%2FbeId\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46a43980a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"f0ea37903532b7ac1f5470bb4d5dfbf1","sha1":"16f1da1a057ba26880ac40c3c5cb0409eab4ae0e","sha256":"005ecc8614a9e4c727f6ee6ed11587ac269c24a981b536d4b71b0791a1fb9207","sha512":"6a0978f8386639ef1be2324286bc524202907c74140029dd3b2075dff6ebe7a7720a41d9b5ef4977be4d493ce4c963e9efc244f572d529695c92078eb7e8bdcc","ssdeep":"","tlshash":"3961394eea1418010b09ea561ef59243c7178aa02faafd84dcfd8d97467a0c44deccd6","first_seen":"2023-09-16T07:24:25Z","last_seen":"2026-02-14T16:52:57.439202Z","times_seen":339,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/api/base/tradelist","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:49.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"POST /api/base/tradelist HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nX-Token: \r\nlang: en\r\nContent-Length: 34\r\nOrigin: https://m.lmasv.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"from\":2,\"page\":1,\"pageSize\":100}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7kkAwO6zbkySnx2MOBoWxa5BZ7GpXUIS4wK7LahJiuRcN3qQpvsUuOUGngiPv7aRpkqqOkQ2zcGcY1950RB1feaqQqOd51OEQ9GD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46f56d34a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1713,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"403eae9dfc6a1713db2d52b80388d55d","sha1":"d2a4f5006f0416fa8924324437ff01ce29b88689","sha256":"062f7032c3892d2a0867b852311a437267fe35ace20d377d697489b9981e6934","sha512":"f826dbb31f94bb1b7bc27ace6495f4531dab4b4aae5e4d6cf89a5c65b8ca69f25452b675903662e9e25cba9de6155d1812999c4b2943e1b04218856c9b5e7680","ssdeep":"","tlshash":"ca31c05fe6a9c5355b1620d5a8c33fe228da63634c8c8f4d6b97cc85c6643273c46515","first_seen":"2026-01-26T04:31:01.739463Z","last_seen":"2026-01-26T04:31:01.739463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/launch/logo.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:36.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /launch/logo.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-2a6da\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XvXt7m3vbJUoHTD3HXWMS%2Bl%2F%2FcutJ1rl0y1GBH1yS%2BI3WX61mgVb7bysBy4IpQFJvHxd5JMSNMNVqoQimaA2O1tGoeLPX1x2T7Jc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46a8c9aba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"5d03c149ca364e3552b7cc950ce69e1c","sha1":"6c3df87caad54b857327ae6e44a670574bafbd2b","sha256":"949e36047fab4b4119a3b6b396ad22c99661f603a145ff5f2195fed814a8f5dd","sha512":"7412ef723e147dbe1a19122c3f0045b5c4fa321b214c9ac9f591b37b4a66f69af80939951642ce89cb28d02e210f0dcdabdcc4932575da8584cfe057f5b2c7dd","ssdeep":"3072:8x3yO/ZUggyJzaKZEIjGeCJug68Jh/5fqD5Le3ujiHZHgtlfez1WwV52dOG7q+ok:85yYjJ5ESGemug68Jhok6iatM2drPok","tlshash":"c30412ce64fb1d038dfce81699a6688b337451973491907dec72340abad5b3c95c8a4f","first_seen":"2026-01-26T00:24:35.216163Z","last_seen":"2026-01-26T05:10:21.537715Z","times_seen":3,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":749,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/api/base/tradelist","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:47.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"POST /api/base/tradelist HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nX-Token: \r\nlang: en\r\nContent-Length: 34\r\nOrigin: https://m.lmasv.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"from\":2,\"page\":1,\"pageSize\":100}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u8O9%2BD4D0XQwos5JICp%2FDIiRyPaYAdcM%2BFceOGAABGQ69K%2FRrcPm4iYSd%2Bh2juvcZSzi950YyPRDbnABBgpFthEJSUBkzwPRDHBM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46e8ecc4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1718,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e0368beaf2e1b93d1b19710f7f8f19c1","sha1":"178527ff57bd42590250fc98ed6697c7d69c24db","sha256":"0599763a29dbe269391d63eed9bbfd74867f11fffe26ddbaea465969bb4548b8","sha512":"de6cfd3495533f83a14c11af379a88245b3addf092e8bda51736b79b46942128d3de5dc4618f1b15ad116cb7b413fdc8184c1f55404c75b67a1f23de67999e83","ssdeep":"","tlshash":"f631ff5fe6a9c5256b1620d5a8c33fe228da63630c8c8f4d7b97cc85c6a43273d46615","first_seen":"2026-01-26T04:31:01.74408Z","last_seen":"2026-01-26T04:31:01.74408Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/home/icon_user.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/home/icon_user.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-21c3\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dPQyEyG%2FgNyuAY4D6DwFENTXjTxzRdC4OC7l7Q0k8ep98%2F95jHFejrSJJc7T1AsRyDt3jfa6tRwXK110mmjPLC7nB7jFIEQRAaWZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d469f494aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8643,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"5b9e4c820a84cc79079327d923153198","sha1":"888164c54f0cff57527ed120469bd6ff4e312bb8","sha256":"457e8271608293feb1d1f8e512f8df3095d036a5b420466a6533c4ae09f30165","sha512":"de4c979671905786ca0ebc170be3262731a36f8e589ea6963d64b7acb307fccd67161d19fe1a88b0825d61c09f2f1e8ce4c81b98e8270e2de2cce50d419de544","ssdeep":"192:dnFdygMRiUFAtFq/7NV3mSMQl8MAh9zMao2UrgQCJaepNQ/:dnFdEiUSvqTnWnCjcCahUoJq","tlshash":"1202cf817ecdc1cec5dad420e86052f9dcb82e470fe91e31111d60eb073aa83e9b6475","first_seen":"2024-11-25T11:23:51.857297Z","last_seen":"2026-01-26T05:10:21.543393Z","times_seen":5,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/tab/icon_market.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/tab/icon_market.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-51b\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XVCp35XHph2anfZ05yCoYQssXl%2FT%2B8SO6FjSpiJsd77KrqcIwL6iihZkM4YLgj%2BP1CpnEgDgiw8QpmRl9MDbkOCkFzXCC6DSF4gH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d469f7951a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"bb9fda1cf4d738e8efe905fb76f0e689","sha1":"1964781e4b17c84e2988d1b8ccaedb2485251858","sha256":"9a9be208eaba722ecac1720bcbf252e2425e0b596fdd312ffc62c9a646e6e095","sha512":"0c407717f736e5451012b55e7d3ff8acd0c66ccbacfa8ac5b684669e0859ed1442f6150fcf39b5211a52c86312616991df17c8f2a3dd7ffdc98fcd4fe8e02bdf","ssdeep":"","tlshash":"5d2150dff751a4429099de4129f640b7c82749c09ee0f0a6f9c988aa9e250f548ae0cf","first_seen":"2023-07-15T10:38:22Z","last_seen":"2026-05-29T07:07:41.665582Z","times_seen":238,"resource_available":false,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":709,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/launch/logo.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:36.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /launch/logo.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-2a6da\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7T19hxvkestHI1Pg7rgOqU625yaBH3gASQsnjOUlVD40vlirFFdIxrqIw%2FWfoj38OJ9QFfEKb8cfpZawQljezk5IwWfo%2FBrJCjCa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46a8c9aaa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"5d03c149ca364e3552b7cc950ce69e1c","sha1":"6c3df87caad54b857327ae6e44a670574bafbd2b","sha256":"949e36047fab4b4119a3b6b396ad22c99661f603a145ff5f2195fed814a8f5dd","sha512":"7412ef723e147dbe1a19122c3f0045b5c4fa321b214c9ac9f591b37b4a66f69af80939951642ce89cb28d02e210f0dcdabdcc4932575da8584cfe057f5b2c7dd","ssdeep":"3072:8x3yO/ZUggyJzaKZEIjGeCJug68Jh/5fqD5Le3ujiHZHgtlfez1WwV52dOG7q+ok:85yYjJ5ESGemug68Jhok6iatM2drPok","tlshash":"c30412ce64fb1d038dfce81699a6688b337451973491907dec72340abad5b3c95c8a4f","first_seen":"2026-01-26T00:24:35.216163Z","last_seen":"2026-01-26T05:10:21.537715Z","times_seen":3,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/api/base/tradelist","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:37.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"POST /api/base/tradelist HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nX-Token: \r\nlang: en\r\nContent-Length: 34\r\nOrigin: https://m.lmasv.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"from\":2,\"page\":1,\"pageSize\":100}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GQAkQ41KwsJCRHrnxGVrisLsRDYc8zOdRX8CiGRMjikpXCPN8NcbTJooJOTrWEZwzHAGfKVc2jYp2SBTqSm%2FfBP7sd94Tlbo2YIA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46aa69bda0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1717,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"da71d98de21f036f1454425a685fadff","sha1":"6d6644d7831824d7f056ec9216aaf1364a8163be","sha256":"d2e91dca987e2df92915d25233f7c4f9ca4e27ca88f839a283320d3e05e319c0","sha512":"ba179230278eb9c0676359f93f636a9f32dc26bffcb5e10590fcab2886bb22970b805c083be9ab85eda1f6a040194ed5abea2dfd24ecbe278f749fb050ba6d60","ssdeep":"","tlshash":"cd31df5fe66989255b1620c5a8c33fd628da63630c8c8f4d7f97cc9ac66432b3c47615","first_seen":"2026-01-26T04:31:01.74808Z","last_seen":"2026-01-26T04:31:01.74808Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/api/base/tradelist","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:41.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"POST /api/base/tradelist HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nX-Token: \r\nlang: en\r\nContent-Length: 34\r\nOrigin: https://m.lmasv.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"from\":2,\"page\":1,\"pageSize\":100}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VDlYjBmOqxqmFLlP0Z1xdqzpK%2FUChQyOQCCS%2B8147MgPBpNadVuk6J8qEOysVkYqQZY7PJiD6HnbVYSkoRgNTBUiDiJ74P9upxkG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46c36aeba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1717,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f5e992b4855d54c302c6171f18f752d9","sha1":"108df5dcb54b68b7951f931511f0e96dfe7471fb","sha256":"38358278867aca8ce98c7a7adef30ad6882a53bc1613c9f6749f0a5080fe358b","sha512":"1b2a34a6fcd11236ac01bc59b4f96af4f9fad8d394d1de4f2c3fc8b842cf3f25edeea089abe54f0a218f1f84cf89535270c3ad97baecbec48344856b962dcd2e","ssdeep":"","tlshash":"1131f15fe6a9c9365b1221d6a8c33fd228da63630c8c8e4d7f87cc8ac6643273d46515","first_seen":"2026-01-26T04:31:01.750144Z","last_seen":"2026-01-26T04:31:01.750144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/api/base/article?page=1\u0026pageSize=10\u0026cate=2","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /api/base/article?page=1\u0026pageSize=10\u0026cate=2 HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nX-Token: \r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWszXqey%2FtB0lIMevlJmsFkxUMj0tLGAo1btNtRX%2FW1juyD10yuMI2un8DLp6dRxdIdJq3CK%2BFIYvC%2B09gFIvzLPYOCcXQBsQoJ2\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9c3d469f9957a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":805,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ce35804bb4d47b056a76f7c16fbfdbc4","sha1":"8c650e0eda6067c73ccd383a8a02004776222720","sha256":"4a9f4af4e987bdd8fa46c41472616836dcc113d16e3e5f286d2eb5cc0a2e27d0","sha512":"ed9eb12d9d632d488f2ac81b09f47a6a65da33b68a4fba831639b924d03b8668b16dcfed489eb71c9f97d3ae14dfef52bd0cd308787a1e422a5b67bf0ae922bb","ssdeep":"","tlshash":"c101613e0539482926142145758b3259f1cfe6bbc94844e4df6fcc09c8c9ab2496b719","first_seen":"2026-01-26T00:24:35.221864Z","last_seen":"2026-01-26T05:10:21.513553Z","times_seen":3,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/home/icon_carry_token.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:36.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/home/icon_carry_token.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-fbf\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=34ykEhdpbg%2B2mVnNNQaKGP7nH502vkBwEfbrXXlUQInwHjLWel4ed9LxCZppEhZ%2BRJpomZGwXrfDC%2B0cnL2LEheTiJN99puOShJs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46a4397ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"c7b3960577f6e8239034c513a48ed2a6","sha1":"bae972c97f233165923f3890e4008bc5d7fac499","sha256":"5701645f155fad6c3e098f0f8d9b4a7b3ff73e91ee1027f99b30a63ebc3006bd","sha512":"c50d5133ef7dbeaf993e9a6cf5d146351e71803984b916d179dbe26f6197b48f893aaf6605f22f3b2b0a8b18ee700fa697d9072765d06f8394e592e805901022","ssdeep":"","tlshash":"35813c59fb849e050b0e9e402df883979f6347855ec09555fccbc867f8650d9ad2e8c3","first_seen":"2023-09-16T07:24:25Z","last_seen":"2026-03-22T13:21:27.934889Z","times_seen":166,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":725,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/api/base/tradelist","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:39.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"POST /api/base/tradelist HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nX-Token: \r\nlang: en\r\nContent-Length: 34\r\nOrigin: https://m.lmasv.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"from\":2,\"page\":1,\"pageSize\":100}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVbDIHo3VTidqcvar4BgOhzxTdXq3q7HszYq0GeOBJ5aEa0UbpYBky9Nl26bZR6f7AqVniAmZPJ97gBnOumagVGywAMEtwAV2hDS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46b6ea50a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1716,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0c2e0c10460c8d16359318a0abacaff2","sha1":"47b656ff34e83f6b9c8606945a7f89dff08e9f2a","sha256":"be0b315980f58048415e9507e54309b58a5f3aac4b8d5b373a7864576199f8a5","sha512":"4b97581db814fe5a18cb7a91e5d5e5933de397ab2b978a18140efb899e0e2a8ee006a81e7a178f446a15344d77bf0196e45978b5f9f58cd8a5caea9b26ea71e9","ssdeep":"","tlshash":"d231d15fe66989255b1610c5a8c33fd628da63630c8c8f4d7f97cc89c6a432b3c47615","first_seen":"2026-01-26T04:31:01.755407Z","last_seen":"2026-01-26T04:31:01.755407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/js/chunk-vendors.e28c671a.js","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:34.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/js/chunk-vendors.e28c671a.js HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696fa328-16b9a7\"\r\nexpires: Mon, 26 Jan 2026 09:06:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 26627\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DK04PnssYD%2FfqVHIuzcQK0OHT1RR6dcGi%2F1cuq248ryIcx%2BQdNkZX4COel0%2FNWIHzI1x%2FBko0ciJojDPqR1V9I9bNd1HEebDeVc2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d4699c8aaa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1489319,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35083)","md5":"526606fab2476da989a87c7bde2204ab","sha1":"85639313fa518fb3e36457b6c554ae2d6664a6c1","sha256":"8ac93d6f5207e4e18749cdc04e9984b8b3f710efda1e3ea27f81d1b7ca989dc8","sha512":"20964d9c06371682555b6ef2084a6b505de85c08b6f8110ec1434897829e00a90f3f3f009c8a7f047b289b43b8ec5de55adc3ff5f330b3812df6ef2f8369eaf4","ssdeep":"12288:UQqw8GTmOHkdsIORuv4zZ5caftZ4l2qFZ:UQ45OHkd9ORfz0afj4l1T","tlshash":"0b25188cf2c2b0a616e770f5402f220bb2376959740b8498f675e4d1ad78a4e6237f7d","first_seen":"2026-01-26T00:24:35.224838Z","last_seen":"2026-01-26T05:10:21.526884Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/empty/image_data_empty.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/empty/image_data_empty.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-430d\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTMk6pB92LwfvHwJ0yPQq03GNWylMP6jCNziUebXXtke3qtP50PZpI%2FxV4KA3sjGtoxpCr4UWb101mbXkpmvwAZpCo1Mkjwyjlqo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d469f694da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17165,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"a97ed149994da025feb57f6fadc5ad44","sha1":"dcfe6ae6d90104cbc50c50dd6010c1f8eabee5a3","sha256":"1313979fab9eeb26a16c1ba40bf5420d74e4c361d9e3d8342a3f52a3bd18ce17","sha512":"8ead4961101130552568d3c95b976d7715dc5c12bd05a33bf3b410da1b69d0f08b041fd31af225596ad62c9806724dc0849ecbe4332a0be3e557fb0fcc0636fa","ssdeep":"192:uLeWVddXO0KGQ4Z0kYWoHn/UuPiAvlNzJiRGKgtNrJGHFnw/S8i3PLkoODZDPbkw:uLeWpXO0Aa0NPiEyRGTrJLS8yWPg/I","tlshash":"f3729c19eb523ae212314a348c774e687d00e4aea644b7ec58c3c5b63c3234df5caa3c","first_seen":"2024-10-25T10:26:18.745739Z","last_seen":"2026-04-11T06:48:55.191Z","times_seen":29,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/home/icon_exchange.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:36.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/home/icon_exchange.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-f1c\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T8en%2BpYIMKWiptLuc8Nz7gUIz3SgjUlAooBMGEvnR3etdY%2BvGXEwYmkHnJ2kw6iD4KziJj3cDRrRFZQW533ljN3YadHh4ZLjVqlD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46a4397fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3868,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"c31a3e22dea48b29659b95b930be4795","sha1":"2354a4551791a1f6e77d27a0990924646dd5947c","sha256":"8dfae710335ade25ea4b6660b6fc327c1bb929776ed701744299cc92f9b5b5ce","sha512":"2ea291a0c6bceecc9701d028fe3d97d00b00a3bf7ba0cba5b5ac27c3c4b620b52b15d2716970127d3848d765438baf34bfc8d4b26ed53cc60543cc4654506643","ssdeep":"","tlshash":"6a817d40f850159d204e8aae25bbde0c8a16c2c0835b2e0c9daf8a5fd6349323cbdb25","first_seen":"2024-11-25T11:23:51.854717Z","last_seen":"2026-01-26T05:10:21.500771Z","times_seen":4,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/home/icon_staking.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:36.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/home/icon_staking.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-101a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5pFSPMoFZXEyWKH5ulh811dEE7nqbYe2PFbxwy67DkKf%2FfEDurgW5cgvI5RB4vBtEYdSEJxVcGk%2FN3%2FWn0Cbj0t0aw6LcXmr%2B17F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46a4297ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4122,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"c5ad0e9847c3915d249b6f01deb21cb4","sha1":"1b2e0835070ddeb3cd3c059fcd60a1ab623a6836","sha256":"63fb350eab09501edace3faaa74ffaec1ad90cc05d739c1640a33fb2bef17fa0","sha512":"bdcc362d327612bdbf438a10238ecb4fd50f9d27477af357b473f914e07f04ebde2ea705c1be79ef05de3e9293eb2d8f9f8792a728cfe462cb98fb7be2b07eb2","ssdeep":"96:4YkknmWIM8B/RturJHAU9I7TEvz3CCLJCPzjZVEWdYzVaGlRun2:Jkknd/g0I74GCt2fR0tlRun2","tlshash":"6d812b8ef9027c52538fde82b6e1128b2b2b4ac5b1c5c5c5fc9e58934861befe5c54c2","first_seen":"2023-09-16T07:24:25Z","last_seen":"2026-03-21T20:33:45.50428Z","times_seen":160,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":729,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/index.2da1efab.css","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:34.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/index.2da1efab.css HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696fa328-178f9\"\r\nexpires: Mon, 26 Jan 2026 09:06:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 26627\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GIQdot3uJYFVC6FrTOe48Ozvn%2BaOSU8iPh2pJr5YH5gphs%2BU0k8SL95E28BbTgzyD4JpgsdYAfn%2B83P57s5qwspzGty%2BOT6wncvV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d4699c8a9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96505,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73ae6c583d02d78f81e3f18860a2899a","sha1":"07df9233fc11dddc34fbf519b891d40b2ac29c0f","sha256":"e97de9a247807f12d74101e9f736250b2410be4e1ed3d17ed875e4b08cf66c83","sha512":"da54ba9dbe06d8d763f3cfd64cf5babb54e761e3208c7a2f23e845290c48db8c115bb86c24262cd6c9a96ff2e51674c6d86439e1814baf2de7980f5c06349921","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nKhlvbc:VApuK7hmVrS1Wu3iG41nKPI","tlshash":"1893f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2024-01-02T00:07:11Z","last_seen":"2026-06-07T21:17:04.509727Z","times_seen":5978,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/api/base/tradelist","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"POST /api/base/tradelist HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nX-Token: \r\nlang: en\r\nContent-Length: 34\r\nOrigin: https://m.lmasv.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"from\":2,\"page\":1,\"pageSize\":100}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1m91G3eKdFtYMeLSEHd4K1yj5omcjRHKqwKOYVfwYQDe9tz%2B7meCXJq8L6e9%2BMo3twVga0hoSlAwTLn916zHLUSG79WYM5J%2BWAN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d469de917a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1717,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"59792ecc3c4961a6b7855c6993e11727","sha1":"54ece5384c7af20b114aacf799698fccad31a89b","sha256":"f5e9ed7291b1c6955e0adf8e0dc6dd002de86051baccf126da5699cc316bee0e","sha512":"f428048dcca8ae818db467654d49bd53ac0079b3af786c845292ed70f0d82a7aed91cdf1fa2d0a486a497037031b1d7791e4072f8f705e18fe91ef54c8d99098","ssdeep":"","tlshash":"0a31df5fe66d89255b1610c5a8c33fd628da63630c8c8f4d7f97cc8ac6a432b3c47619","first_seen":"2026-01-26T04:31:01.762395Z","last_seen":"2026-01-26T04:31:01.762395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/api/base/article?page=1\u0026pageSize=10\u0026cate=1","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /api/base/article?page=1\u0026pageSize=10\u0026cate=1 HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nX-Token: \r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YCceuwSpDmGjr3PeZ8bIrYEIzAosja6nP93VPg1Hz6eP4rPKnMSsZhmA5KdYLandiNIwO%2FXkjN7y1yS8xBxDpbJ928Go%2F%2FqpCa9j\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9c3d469f9956a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ed81101bd358e186063433c59fb563ff","sha1":"fd7fadf509764597839f9bd5617a0df41e757310","sha256":"3484e8cb0f7d36636edef2738c0c024171db81ac573ebb37f3630088c998d195","sha512":"61034240ddad38586c22808ef875163aa6aa58b8916cc827d73ad61f746c29e470cfd82486dd803a54f1e588c7687a4ed1c67f0290cfac51c85197a3d4b935fa","ssdeep":"","tlshash":"39a00295952c07838755a055311f214545b571960d04474c85ad9125c9cd45d1511550","first_seen":"2024-12-15T14:33:23.89669Z","last_seen":"2026-01-26T05:10:21.512666Z","times_seen":4,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-26T04:30:33.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 04:30:34 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMhdRhQ16OChEv%2Fdht9be9mT%2FScWczA0q8MjGrrMdfw0o6PbD17J%2B2Y9Q5dqibUz05RI4pC2eSVmZA0k0EDjejBH3Wvg%2FKrbg5n6\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c3d4694086bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":4326,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1191)","md5":"1bbc17caeaa4eb541aaf87198f347d48","sha1":"04d3b826a080f3fdacb7298f54b2c4eaead1bbe9","sha256":"54ab45d6e2d99a4c1363a4ac8ebf6aa08650ededab5b0b371f52306b3ab84f84","sha512":"bc093af89d20875c1d7563064d3a2863f2647e48acb836903983c18b7f89d1ae06b355321334e87164a8ae08e9e12c21fff6edef72f4e7f5ebed06b7de8515b0","ssdeep":"96:tnUZoPZDDa4+YewZOkNR6hi+7JZu7d+7Ju8rDp:JUZ6Da4+YzZOkNMhi+sWJvDp","tlshash":"229184e76523480d1a239234bbef76484638e11bc501dca4bf8c12898fe0bee8dd7711","first_seen":"2026-01-26T00:24:35.191441Z","last_seen":"2026-01-26T05:10:21.510845Z","times_seen":3,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":59,"dns":41,"connect":1,"send":0,"wait":760,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/api/base/site","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /api/base/site HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nX-Token: \r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=60Xv3YjZTjwo8leYG7nqx%2BMdkj4aQ3vEqY%2FhdonR1f8SLs4iPdIVttMGtl%2BM7jwhchcghGUgwE3loNAnJe8y4KKn%2BSPjau6IG92X\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9c3d469dd915a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"534453bb92b7a493889eeb4138e4de6e","sha1":"2e308792af2c727b60f0d0a0b6fe335b9edc15c5","sha256":"43e4d4dab83fba4db6c6e1008ae6cd7b6c7ef6902c970f5ffd5de38494719da6","sha512":"b574ecdd61aac53a8f99b4f018c52adfea82bc634a6798df8ee38fe7db692acd047e3ea883ed429926f5e0e4569e6c8299714a389c1f7827ee47740d57e0111a","ssdeep":"","tlshash":"f4e07dd242511177c7530798ceacfa004b69b3f128cc0b40ce0f89069ef10f6b21cb12","first_seen":"2026-01-26T00:24:35.256237Z","last_seen":"2026-01-26T05:10:21.540668Z","times_seen":3,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/js/index.33d42a20.js","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:34.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/js/index.33d42a20.js HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696fa328-c6120\"\r\nexpires: Mon, 26 Jan 2026 09:06:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 26627\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6lVqappkPXEKgR25iszDh3vCHWkM2vSux7wjkOEIONvgjuwBn8PamG%2BbgTKFVyo8Jz9yblly07RsZLsvkPKLDwK7uKQk%2BWh1iNM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d4699c8aba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":811296,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64833), with no line terminators","md5":"678311d65af41423532eb3eec0e19755","sha1":"ec6b0d4806016831730b9951f2c5b42e8f1f8a2f","sha256":"6bbb4a08691e4f35929aeeeb5dc41ac6db9b2b079cfa08a1baad52ef14b5f02c","sha512":"54b3a60d84a07698e07d8842e4ff406b5fe21283068fcf6f62c277d8c146cf25c4356328c44b1105ee5362f7e00d2f788e9820d97dd197810de2803ea35da163","ssdeep":"24576:oZXwG1ZAIkKDJ3bys5XrHeU05TkGNz6lLLkOtK:wGQlLe","tlshash":"c9057dcc35ca53f501320242decfa91827709ee77c9a644763b4b64d1f5a7cae663326","first_seen":"2026-01-26T00:24:35.270654Z","last_seen":"2026-01-26T05:10:21.544785Z","times_seen":3,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/api/base/tradelist","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:51.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"POST /api/base/tradelist HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nX-Token: \r\nlang: en\r\nContent-Length: 34\r\nOrigin: https://m.lmasv.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"from\":2,\"page\":1,\"pageSize\":100}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4cjQcnt685zQLcji1dO9OTJK%2F%2BSH48eoOD7fBp5X%2FzwBTdbIpHrVR0An3Nj3Yrog2FtFMoA0fFdWXLZZD80lI3h4FLHyEYR92VEI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d4701ed86a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1714,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1d2bcc77ca96ee48062e08784e2e4bbd","sha1":"c8ff6dfe16039a76d89f0e2a8abd41f3ada087dd","sha256":"1a44897efd720e36f6a6f9d6b3b2c5b4d7390aa6ebb17104663390928bbf5223","sha512":"903c2175d26dbbd8f296ee9c81bb104fc22c4a92f5563ce67a841786114afedd85ba6fabc1f25c3c56f390fd597d0d8101af7891122e04fbcc8c77f4a9c79934","ssdeep":"","tlshash":"b831f15fe6a9c5355b1620d5a8c33fe228da63630c8c8f4d7f97cc89c6a43273d46615","first_seen":"2026-01-26T04:31:01.769936Z","last_seen":"2026-01-26T04:31:01.769936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/js/pages-IEO-IEO~pages-IEO-detail~pages-IEO-history~pages-bitcoin-bank~pages-bitcoin-bankDetail~pages-b~88ce9424.404997aa.js","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/js/pages-IEO-IEO~pages-IEO-detail~pages-IEO-history~pages-bitcoin-bank~pages-bitcoin-bankDetail~pages-b~88ce9424.404997aa.js HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696fa328-37ba7\"\r\nexpires: Mon, 26 Jan 2026 09:06:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 26624\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0L5yd4Sw8P8U1k7y%2BnVpMZHegnBuKc%2FeBPYYQyPEKaLgtT7kqJb8tjJQ%2FMbG9JUkmE2jn2vA2Ws07ipAK36S8pgAUOLjUQjEMEE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d469d5911a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228263,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64318), with no line terminators","md5":"865c9247fc3cafb92d44cafa6760f84d","sha1":"c53e9763bea6340a356b0080f3d0c60dc6c46c28","sha256":"b0a39b699fbb6a95ee9181cf3ea4d113040188b728e47dc15e9d17ffbeb56b54","sha512":"2f31cab37476d229cab61a1132c64df132c1d6feff9b68c92a781ac07c7a537b08a28fda11b732cfa044324728aab0e03cfa7901ca08578cb528b3c30d6dfef9","ssdeep":"3072:Qci+xq5fBeQOqZA4WDwswsqoHdhscsjF5Co5KGZ:QU8fHOA+wsMF5CokGZ","tlshash":"5924295c3146f45b07c35825a42f230661263d1fd849b988f7e2a9ef8a7ca5d3267b3c","first_seen":"2026-01-26T00:24:35.274294Z","last_seen":"2026-01-26T05:10:21.516315Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.huobi.pro/ws","fqdn":"api.huobi.pro","domain":"huobi.pro","tld":"pro"},"ip":{"addr":"108.157.229.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.huobi.pro","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:35:B9:AB:4F:A6:C7:06:A5:72:1D:79:81:3C:B9:B0:06:A5:0F:4C","sha256":"D7:AC:0A:77:F0:31:1F:86:F8:2B:30:5F:1C:6A:36:0A:55:A5:C7:95:07:48:70:4A:F3:1C:4C:F1:B1:90:53:1F"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: api.huobi.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.lmasv.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 4WV3dNWdGcy9cFLo/ilgaA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nConnection: upgrade\r\nServer: openresty\r\nDate: Mon, 26 Jan 2026 04:30:35 GMT\r\nupgrade: websocket\r\nsec-websocket-accept: B1SG6+Nhaelkeq2scF+D48uoZmQ=\r\nRequest-ID: a22cf07a8c04db2b6d64cff66986d0ca\r\nX-Request-ID: 0622556b7cdeda5def9aafd155598f81\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 36510edbc7ba8916907c18e15b00f64c.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN56-P2\r\nX-Amz-Cf-Id: mK4omgkDnQoAeyMBP1mo3HCZ9N3AXtujXXPjLtuNZhtmREMGcWz1JA==\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T21:34:24.355052Z","times_seen":16222068,"resource_available":true,"data":null}},"time_used":834,"timings":{"blocked":0,"dns":31,"connect":39,"send":0,"wait":736,"receive":12,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/tab/icon_deal.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/tab/icon_deal.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-8a4\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gc45kJR442ZvCY2ESVJ7M%2Beqc9c%2FFRqYBky1wMmPjoFusiS5QNwEr7FSaixrV38ZTWqZ2VDxdQZRrBFDX%2FpuscOSwvXYIX2Lg9jS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d469f8953a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"fdfdc6ad0fad0e274e8f4b6e45c71ed0","sha1":"b078f727d4dbc20325b044a02d3b3237669412b0","sha256":"0e27358e465b262747200454aafeea36dd8f00845c24f0568b02ce911151d295","sha512":"f045bde6cb19dddfb8919be83e7d21778ebc87ce9914ae926da48c3faee89e38ca6ef81fb0c41741adcae3a42616b106c5a90537d0c4245cdafc673a4860b2d1","ssdeep":"","tlshash":"9741099ca9c7dd92959dc14018b650fadd2711c4cbb0e51694d9c4e7e9230f00abd0d7","first_seen":"2023-07-15T10:38:22Z","last_seen":"2026-05-29T07:07:41.649538Z","times_seen":260,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/tab/icon_contract.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/tab/icon_contract.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-867\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0dSIs0oejVkBszAWrSVJIQEKIyh9AkbPHnzyXnW5GaakuV%2BwgLNd66hQJjGHix%2Bu%2FvlrIe5MHF%2BfDC%2FIzs29QjAGu6zuSj0hyPqc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d469f8954a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2151,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"1e639c91b02ce12d5e22a4c476238425","sha1":"599883b3bade960e7e16b61711656d0c27b09a44","sha256":"d901667f0f5b32daba208fa9b77f2aba4430e6aa2066baafdb63e0a54b7c63d8","sha512":"734b3de8f5d687f637b5e86e6431d47b63f098de109ab88a117e8410c2aa434e9743475c5353c345a08d33c61df791e367e6ae76dc9ef4d2304557e30d0c50d4","ssdeep":"","tlshash":"4541e58df744b841e188d84228f785678b27558088f1d56afc8ec89be9725f8487e9e3","first_seen":"2023-07-15T10:38:22Z","last_seen":"2026-05-29T07:07:41.688823Z","times_seen":235,"resource_available":false,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/home/icon_loan.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:36.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/home/icon_loan.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-1639\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDSKJmkAQ%2FTiGkLhuShkq0NOgHLcE5QrdFrlcqWxNPt8iYBtrPkIwTJAHbZfwsarIWkHNXZP7XcKwSYmfHsMNwLbdFUOwXaHesag\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46a3f979a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5689,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"72c4f4a965a6973eb79063a1c43a9fe3","sha1":"50ecd82dda77d4cb7ad2463933c57ffdbfb909e5","sha256":"17856b51c635e1d424d7aa65248f13616ffe68e49ce7f128c37a1692f3eeb73e","sha512":"588efca6a8b9995ca66ebfc5ad0651fa0cf06d81e20c4201fb3146c63d0e3cd76416df038adb06dac9619b7ed48db00460a39f8db2e8ab85bbe43f5c9f018ddc","ssdeep":"96:nllcHitlIxv9vk7C1+I4wWHLihk/xyJVdIFfbVr8pSGM1FJIQs3ENwBhdFfLxiLM:MIIHUCD4wawJVIfbmpST7IqylkM","tlshash":"10c1ae04e461895e248d1a6c34fbdd430322a848912c1f0cfab8664fda32f757db57e7","first_seen":"2024-11-25T11:23:51.820655Z","last_seen":"2026-01-26T05:10:21.523255Z","times_seen":5,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":699,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/api/base/tradelist","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:43.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"POST /api/base/tradelist HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nX-Token: \r\nlang: en\r\nContent-Length: 34\r\nOrigin: https://m.lmasv.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"from\":2,\"page\":1,\"pageSize\":100}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OTKgTbGkTyJnYJdGu76vXsSgL0TCyZio43o99gwAXSz87CbcWK5I9uf0XL2yOs9XEK7Zzh50p4N7dbmWz4eH6e%2FQN8v1W%2Bg62f1f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46cfeb89a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1718,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f670bae1650c0ead2088eb141b4553a2","sha1":"e97c9023165cee961c34c817343811a0d90d7aff","sha256":"f604875598a7500486aa1e99c7a0c41d86c5521edbcd61645d42f2aecf8fdd83","sha512":"13df1322b88382c4a3fc4aec5c3d266b5d03d704953d3e2569768ad64b15d591db670e5c43c9e961b731a6da629dcfcafa2d63867712bc86c5be253e8789c226","ssdeep":"","tlshash":"43310e5fe6a9c9265b1621c6a8c33fd228da63630ccc8f4d7f87cc86c6643273d46615","first_seen":"2026-01-26T04:31:01.775983Z","last_seen":"2026-01-26T04:31:01.775983Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/api/base/tradelist","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:45.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"POST /api/base/tradelist HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nX-Token: \r\nlang: en\r\nContent-Length: 34\r\nOrigin: https://m.lmasv.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"from\":2,\"page\":1,\"pageSize\":100}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZOaRzWXso5Wa1pimcyUiLZS7Vgo5NcGVILTox%2FrNh4E3W8qUXFJm%2FOgINQVfCMk6WXx7IDV0aukJtggzeoO%2FRcW94BPTfLKXR8Lv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d46dc6c53a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1716,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7cbb76059e93a43fe02b44e5c77c70ce","sha1":"abcff73038a6138cbf22473903e9b4f9eb8b98b4","sha256":"e712c3827d1419a17f2dff569cdfbcd010dc4dfdc3a82d19359b19bcc6431a43","sha512":"bda172d1f2214fd60471cb231ba45a3cdde28a6735ff9c363b807e9dd16e369c585ac52d464570473b37fa7554fd3b3ae9eb91acac983bc1764ce7d0022b5833","ssdeep":"","tlshash":"cf31005fe6a9c9365b1620d6a8c33fd228da63630c8c8f4d7f87cc86c6a43273c46615","first_seen":"2026-01-26T04:31:01.777925Z","last_seen":"2026-01-26T04:31:01.777925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/js/pages-home-home.86a88ea6.js","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/js/pages-home-home.86a88ea6.js HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696fa328-c1bc\"\r\nexpires: Mon, 26 Jan 2026 09:06:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 26624\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AoKNQ20Nx2DSxpJinv4mKMEHPDL3B0DV5myMBK8Dgjrmrd%2FnE%2BhGzLLDWDKPI8rMeUwvU%2BHA8EfPG272HbTupFSsDl5zfRxg4tnW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d469d5912a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49596,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45914), with no line terminators","md5":"a7963e4948880a11fa949ad3f40827a5","sha1":"00b436363616ebef7f1ed29c7304ec02d616cb31","sha256":"e96045b90a410b25289ef3803e8e236b2da6d07cf06c34dc11e062257cda3712","sha512":"d397b8e29fb4a2799efaee5abe6b115b0159f778f86e79f6f1b4816b6a0babcb36c830a9385c68bec8cb8de52692c817ff0a332f09473471333679a988e705ec","ssdeep":"1536:rzFnPrZf5LXe+6HlSMRh1+RHnURvedEzhjPbGb8OummmNjN:lPlfTMRv+RHnURvedElvCRmYZ","tlshash":"d523e71cb18bf82b4ad364b4241f1419e1363e989425f081d7f5daf68eb1a8f172af4d","first_seen":"2026-01-26T00:24:35.244805Z","last_seen":"2026-01-26T05:10:21.539961Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.lmasv.xyz/static/image/dark/zh_CN/icon/lang/icon_en_US.png","fqdn":"m.lmasv.xyz","domain":"lmasv.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.lmasv.xyz/","date":"2026-01-26T04:30:35.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmasv.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 15:19:08 GMT","end":"Mon, 20 Apr 2026 16:16:20 GMT"},"fingerprint":{"sha1":"A6:66:1A:2D:AC:C9:3C:7F:81:26:00:28:C5:23:9B:0D:3C:B4:BB:2B","sha256":"C0:28:54:F9:BD:54:DE:D5:07:45:D0:02:0F:33:FC:3F:BD:1D:1F:40:C4:33:7C:84:CB:20:EB:2F:6B:25:C9:B1"}}},"request":{"raw":"GET /static/image/dark/zh_CN/icon/lang/icon_en_US.png HTTP/1.1\r\nHost: m.lmasv.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.lmasv.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 04:30:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jan 2026 15:45:44 GMT\r\nvary: Accept-Encoding\r\netag: \"696fa328-2929\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LnlhS9mf4ihTlMoSBwr4q5OyEvoBMYTibA7QOLbmkDqHHloE1Wtfk6I45sH6LKx2qe4NH82%2F9JP14wrBb1UaqMAv97HAiga%2Fmcuy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3d469f494ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 326 x 326, 8-bit colormap, non-interlaced","md5":"13a912082f5dedec19bad24fa31b80cf","sha1":"a8cd4a3bc8b2cf3d3e6dfbeeeddfea33593df0d4","sha256":"38a50e06ecb8d469b3c81a4a6007e381787f4f1b67fad7b2b918e2d682346a31","sha512":"ddf001dd9feca5ba3be5b9df539efadc1ce6ea400db2d667b86a8734925d7228c64eed1e525824c86abd0d70e9be6c2a98a90d49ef02337a1f25aefa6e8d5a98","ssdeep":"192:ZVDtrb0lz4O9j/c/LHZMPfQOXHPYU3ioaWPG3xdytGv+hzOnzRn73xg8dPDEECX7:Lhrb0Z4O9j/2LZIIWZioaWPGBdytGvEV","tlshash":"c722c01ba3893d19ae8e2f695d9409dc9de9693c125cdb0d9a21fec3c86089089fbd01","first_seen":"2024-12-14T12:36:36.124166Z","last_seen":"2026-02-03T17:30:08.728783Z","times_seen":7,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":703,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"m.lmasv.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
