{"report_id":"dc984161-ce37-4e37-8cdc-35284584baf6","version":6,"status":"done","tags":[],"date":"2026-01-11T06:31:41Z","url":{"schema":"https","addr":"keplr.cn/","fqdn":"keplr.cn","domain":"keplr.cn","tld":"cn"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"keplr.cn/","fqdn":"keplr.cn","domain":"keplr.cn","tld":"cn"},"title":"Keplr-中文 浏览器扩展","dom":{"size":6610,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (783)","md5":"17abde031f254caada69c34aaf7ea2ec","sha1":"bfedec6e88305d5ebced19ed22ff745d447f4019","sha256":"f1ec8b766edec7a4a305ee99e454498f606d050dd61e4b0557d7c4ff2385d54d","sha512":"d995bc3d657d9c1f169b18124b9f19a84d145bb97af69874582e107f27ec60af2e0a8a3a2d1f98dae345e0ffd8610adc87e4a6581193a0da7c7710d6010db814","ssdeep":"96:n07L/PlvIC6RbI2jBwNUyb0gfuA9DUV9U0pfjW4HTFo:wPlvIlq5b0ANU3pfjRe","tlshash":"53d1b9e7e2e4a5da0206c3d09d62701caf9730fbe961c10cb2dc19986f949efc893985","dom_hash":"domhashab1d3548229c9744e4eb2cc648072712","first_seen":"2026-01-11T06:31:44.598289Z","last_seen":"2026-01-11T06:31:44.598289Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"keplr.cn/","fqdn":"keplr.cn","domain":"keplr.cn","tld":"cn"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-15T06:31:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.prod.website-files.com","ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-23","domain_rank":20159,"first_seen":"2023-11-01T22:05:38Z","last_seen":"2026-01-05T03:47:56.659548Z","alert_count":0,"request_count":1,"received_data":57954,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"keplr.cn","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-03-28","domain_rank":0,"first_seen":"2025-06-28T22:34:47.496288Z","last_seen":"2025-06-28T22:34:47.496288Z","alert_count":6,"request_count":6,"received_data":19231,"sent_data":2613,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"keplr.cn/","fqdn":"keplr.cn","domain":"keplr.cn","tld":"cn"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-11T06:31:19.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Nov 2025 03:21:34 GMT","end":"Wed, 25 Feb 2026 03:21:33 GMT"},"fingerprint":{"sha1":"B1:FC:FC:52:C0:36:B9:A6:20:6E:01:F6:10:A1:82:09:48:03:02:C1","sha256":"20:4E:74:82:C6:77:31:F8:C9:A6:25:1D:7E:E1:99:D8:53:2C:E2:51:EF:EE:60:14:38:7D:8A:8C:42:FC:8C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: keplr.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3673517\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 11 Jan 2026 06:31:20 GMT\r\netag: \"e47790562e9c1a91071dad5a1784142d\"\r\nlast-modified: Sat, 29 Nov 2025 18:06:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tq7wb-1768113080502-e2cde9fe0c2f\r\ncontent-length: 2822\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6630,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (783)","md5":"e47790562e9c1a91071dad5a1784142d","sha1":"7237c43a7f2c3e90b518e6a51c78ff4e7464208b","sha256":"5b3fe0b1f790e607d37f1f618ac5fcb165b20ba1f5648a3b574973e6c2de2d45","sha512":"bb35f6f84dd2c022e3bf166a2022d319c0ad11a30d20a2bf17787e9ed1c24900607798f91ada6436c2e14b9d46d8170842c1917fbf1c68b7ced46e7eca9c26fe","ssdeep":"96:60IfalWIC6RbI2jBwNUyb0gfuA9DUV9UGpfjWwHTFI:walWIlq5b0ANUPpfjH2","tlshash":"0cd1b9e792e4a5da0207c3d09d61701cbf9734fbea61c10c72ec19986f949eec8839c5","first_seen":"2025-06-28T22:34:51.152554Z","last_seen":"2026-01-11T06:31:44.599427Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1394,"timings":{"blocked":683,"dns":658,"connect":1,"send":0,"wait":10,"receive":12,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.cn/index.css","fqdn":"keplr.cn","domain":"keplr.cn","tld":"cn"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keplr.cn/","date":"2026-01-11T06:31:20.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Nov 2025 03:21:34 GMT","end":"Wed, 25 Feb 2026 03:21:33 GMT"},"fingerprint":{"sha1":"B1:FC:FC:52:C0:36:B9:A6:20:6E:01:F6:10:A1:82:09:48:03:02:C1","sha256":"20:4E:74:82:C6:77:31:F8:C9:A6:25:1D:7E:E1:99:D8:53:2C:E2:51:EF:EE:60:14:38:7D:8A:8C:42:FC:8C:F5"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: keplr.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 11 Jan 2026 06:31:20 GMT\r\netag: \"84f574bc4e2f2da5778fb9b4253a0943\"\r\nlast-modified: Sun, 11 Jan 2026 06:31:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hmdvp-1768113080698-a4bb78c21f60\r\ncontent-length: 907\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2471,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"84f574bc4e2f2da5778fb9b4253a0943","sha1":"04513002ed3c04f003f13d4cf882ef18acc6aa1a","sha256":"6f0e75c2954309209230a136b4e1593a77ae7da0345216c96b0edf00bbe5f2c2","sha512":"b583770c6e9f2142f5659aa0c9926b0fba2228fff545f95e6faab484477277b63c52c1f891e3e7bedd56328eaa3d2ad99da6def19f559d32644f1e203160298e","ssdeep":"","tlshash":"8a511447abb71517b917d8646ff9d70452ac9043860feef97bc8318c4f8a2e851e2788","first_seen":"2025-06-28T22:34:51.154991Z","last_seen":"2026-01-11T06:31:44.600469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.cn/imgs/logo-icon.svg","fqdn":"keplr.cn","domain":"keplr.cn","tld":"cn"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.cn/","date":"2026-01-11T06:31:20.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Nov 2025 03:21:34 GMT","end":"Wed, 25 Feb 2026 03:21:33 GMT"},"fingerprint":{"sha1":"B1:FC:FC:52:C0:36:B9:A6:20:6E:01:F6:10:A1:82:09:48:03:02:C1","sha256":"20:4E:74:82:C6:77:31:F8:C9:A6:25:1D:7E:E1:99:D8:53:2C:E2:51:EF:EE:60:14:38:7D:8A:8C:42:FC:8C:F5"}}},"request":{"raw":"GET /imgs/logo-icon.svg HTTP/1.1\r\nHost: keplr.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo-icon.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sun, 11 Jan 2026 06:31:20 GMT\r\netag: \"67d1e40185db3efa650a114b84467db4\"\r\nlast-modified: Sun, 11 Jan 2026 06:31:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tq7wb-1768113080699-e0c2764ed32b\r\ncontent-length: 734\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2504,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67d1e40185db3efa650a114b84467db4","sha1":"f2a1446877e3e7857938b32a770c3aa0a0d8cb28","sha256":"33880e1f300e477e2253b9907f37ced837aa8e5acc3916d16e96cb48470b1afa","sha512":"795d5e8cd7233bcbfccb73a3f9b10c3c44a702e0f1abe1f72adb8ac06268c4d062d51d713bbc663521d8e093187902a3b59348f7761047b71c7786873694a306","ssdeep":"","tlshash":"f951e1c85254cb1afc59baccd5dbe039215bc9fb6d42811641d3bf3e84a04831cac2be","first_seen":"2025-06-28T22:34:51.157802Z","last_seen":"2026-01-11T06:31:44.602382Z","times_seen":4,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.cn/imgs/iconlake-logo.svg","fqdn":"keplr.cn","domain":"keplr.cn","tld":"cn"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.cn/","date":"2026-01-11T06:31:20.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Nov 2025 03:21:34 GMT","end":"Wed, 25 Feb 2026 03:21:33 GMT"},"fingerprint":{"sha1":"B1:FC:FC:52:C0:36:B9:A6:20:6E:01:F6:10:A1:82:09:48:03:02:C1","sha256":"20:4E:74:82:C6:77:31:F8:C9:A6:25:1D:7E:E1:99:D8:53:2C:E2:51:EF:EE:60:14:38:7D:8A:8C:42:FC:8C:F5"}}},"request":{"raw":"GET /imgs/iconlake-logo.svg HTTP/1.1\r\nHost: keplr.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"iconlake-logo.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Sun, 11 Jan 2026 06:31:21 GMT\r\netag: \"1d877f8d9db8353c1b757d7175e65437\"\r\nlast-modified: Sun, 11 Jan 2026 06:31:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rw5xc-1768113080733-59f7aea7e7a7\r\ncontent-length: 638\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":638,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d877f8d9db8353c1b757d7175e65437","sha1":"b0cb69816daa833dfd115fbd89ff6afc25ce2a2c","sha256":"03c03779af2fc733176792a10c52abd803bf345f971422a74dfefee334af3add","sha512":"54bacfa3852cfb50a103b3b64d1ae4fcf7a6c40f068ef669c048ab93f2c1bcfaa83a7cb599eb5c187c15ca4416c4c547aa979f500aefd8d435741be2727baa52","ssdeep":"","tlshash":"36f0dda85087ac2de8188351b3f041e231d3715fe288086cd4e37d77aa07c601ae39cc","first_seen":"2025-06-28T22:34:51.160436Z","last_seen":"2026-01-11T06:31:44.60892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.cn/imgs/logo-text.svg","fqdn":"keplr.cn","domain":"keplr.cn","tld":"cn"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.cn/","date":"2026-01-11T06:31:20.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Nov 2025 03:21:34 GMT","end":"Wed, 25 Feb 2026 03:21:33 GMT"},"fingerprint":{"sha1":"B1:FC:FC:52:C0:36:B9:A6:20:6E:01:F6:10:A1:82:09:48:03:02:C1","sha256":"20:4E:74:82:C6:77:31:F8:C9:A6:25:1D:7E:E1:99:D8:53:2C:E2:51:EF:EE:60:14:38:7D:8A:8C:42:FC:8C:F5"}}},"request":{"raw":"GET /imgs/logo-text.svg HTTP/1.1\r\nHost: keplr.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo-text.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sun, 11 Jan 2026 06:31:20 GMT\r\netag: \"a9174a83cf23f96ae2e89b4fbb258c94\"\r\nlast-modified: Sun, 11 Jan 2026 06:31:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tq7wb-1768113080698-f8e59df6984b\r\ncontent-length: 885\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1755,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9174a83cf23f96ae2e89b4fbb258c94","sha1":"9923125e289c5656ab67eb93592853e46388198a","sha256":"07e3bd302ae07cae351691b51f92d15014b00fcbd7c5f6efb5739f552daba694","sha512":"301273ffe6385c506123b2be67ecf4c9636936861dda70d69ed50592365f8bdda412b7387e046827ed17a24bfa1e915edf34f2485dd86e570059bcac422284fb","ssdeep":"","tlshash":"5a31547872e8d2ecd429f3ed909578b63c5334fd7322c91887e95918b4811ae1934dc9","first_seen":"2025-06-28T22:34:51.164075Z","last_seen":"2026-01-11T06:31:44.613192Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/667dc891bc7b863b5397495b/6723c65134e6c5d98ad2ba4f_ext-hero.avif","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://keplr.cn/","date":"2026-01-11T06:31:20.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 22:38:30 GMT","end":"Sun, 08 Mar 2026 23:38:26 GMT"},"fingerprint":{"sha1":"E1:F9:29:6C:56:57:15:B2:B3:5A:24:3E:50:03:94:B8:56:24:45:58","sha256":"D3:5A:81:E7:72:42:57:B7:FA:3C:C6:F7:CA:F5:06:4D:4C:20:11:11:40:37:24:F1:12:2C:AC:A4:5F:03:68:0B"}}},"request":{"raw":"GET /667dc891bc7b863b5397495b/6723c65134e6c5d98ad2ba4f_ext-hero.avif HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 06:31:20 GMT\r\ncontent-type: image/avif\r\ncontent-length: 57290\r\ncf-ray: 9bc25ee27f87c272-OSL\r\nx-amz-id-2: HqSzt/m4Wx1GkIWyLPmQPEmdIKKo0cAH7q854v0Y7kp0uJExKCRJw2VSH5CjWVOFTCEFJBDCQtM=\r\nx-amz-request-id: JGXM56FN8CE1C7T1\r\nlast-modified: Thu, 31 Oct 2024 18:03:19 GMT\r\netag: \"cb2c5d9e77ffe042c2de0b6294690491\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=84600, must-revalidate\r\nx-amz-version-id: CgrZbwWDr5eq2jMLgRVRg4.m0ANJWqc_\r\naccept-ranges: bytes\r\nage: 9763\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57290,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"cb2c5d9e77ffe042c2de0b6294690491","sha1":"727df66931c4d9bd6f164590dfc9344e74bb4882","sha256":"0ea614bb1d08df438e68e3f9f3dc52b502e0622edfc5b50452882a2f51f629ea","sha512":"f392d77ebc5b39714412191471cac1a40836daad560cdf383aca46f59da68947fb80c1bd02cb7b14ff111651a9bcc91db3f200e7dec2882c5615f4192df48dce","ssdeep":"1536:U3OmPdTQGctF8ipVSgi87BPfKYtsmkFcjIJMWEB5:Ap1TQNF8OVSgi89qYts0I+JP","tlshash":"e543f176b1966d83d12b24380ffef765a993236ca433ab47831552556ac40f3f3b2632","first_seen":"2025-06-28T22:34:51.162103Z","last_seen":"2026-01-11T06:31:44.614515Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":55,"receive":6,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keplr.cn/imgs/logo_32.png","fqdn":"keplr.cn","domain":"keplr.cn","tld":"cn"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.cn/","date":"2026-01-11T06:31:21.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Nov 2025 03:21:34 GMT","end":"Wed, 25 Feb 2026 03:21:33 GMT"},"fingerprint":{"sha1":"B1:FC:FC:52:C0:36:B9:A6:20:6E:01:F6:10:A1:82:09:48:03:02:C1","sha256":"20:4E:74:82:C6:77:31:F8:C9:A6:25:1D:7E:E1:99:D8:53:2C:E2:51:EF:EE:60:14:38:7D:8A:8C:42:FC:8C:F5"}}},"request":{"raw":"GET /imgs/logo_32.png HTTP/1.1\r\nHost: keplr.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 99823\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo_32.png\"\r\ncontent-type: image/png\r\ndate: Sun, 11 Jan 2026 06:31:21 GMT\r\netag: \"6b79343970cabd7f0075b364b1510f7d\"\r\nlast-modified: Sat, 10 Jan 2026 02:47:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tq7wb-1768113081040-fabb3350a885\r\ncontent-length: 2054\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"6b79343970cabd7f0075b364b1510f7d","sha1":"624b1dcfcfc4ed7311f6aa6db1534b2af88bd239","sha256":"0c9cbecde6d88be10522c600cc015e3740fbb242427faca3a930405ac7b1acb5","sha512":"4924fab1edf3f7768158aa1cbc82fd8f78c023cb799556af763a87143b0251f972740d70c5c7921f390503382262164d9655b28b9f70ba411c6660a85ede91aa","ssdeep":"","tlshash":"4e411ada6e687cb8e780255a121b45550c764d6698a1e80ab6ccde34d4b0cc8f603a7d","first_seen":"2025-06-28T22:34:51.165958Z","last_seen":"2026-01-11T06:31:44.616951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}