{"report_id":"e4a4996d-b1c1-4a10-8873-1e2e0649fd29","version":6,"status":"done","tags":[],"date":"2026-02-03T19:12:09Z","url":{"schema":"https","addr":"dapp.weth1.site/","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":0,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"dapp.weth1.site/#/","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"title":"dapp.weth1.site/#/","dom":{"size":135147,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34613)","md5":"06aec67022b328e23d2123326305bce2","sha1":"e83928b475bf3aac80f3ca96a9e3b68595f8a484","sha256":"06d9b7d8e48ca64ecdc35e1446e6c94e9a22b2e9f2a2b6f4b42b571699b8729c","sha512":"f8b52c94fed64e84d05a9351146b8d8996ecc1ec5a84ba19c4e315521ea354f320a06d8fb5ed4cbbad0540cfdaff5da307c9b50f002d3fe809f4121fb6966070","ssdeep":"3072:LUWsp0NVr7fnaM+PWHvXQLnv6XfTt78z5e0pz:ourr7fnF+PWHvXQLnv6XfTt78z5eW","tlshash":"e5d32bb0b80d3879bb3bcdd5e0846e992a42f733d1864968e64a173d8dc76c33695b1c","dom_hash":"domhash79e50557869063a8f38652fb10eb6d0c","first_seen":"2026-02-03T19:12:15.856267Z","last_seen":"2026-02-03T19:12:15.856267Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dapp.weth1.site/","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":0,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T19:12:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.app.weth1.site","ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-01-08","domain_rank":0,"first_seen":"2026-02-03T19:12:12.111337Z","last_seen":"2026-02-03T19:12:12.111337Z","alert_count":0,"request_count":6,"received_data":4763,"sent_data":3124,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dapp.weth1.site","ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-01-08","domain_rank":0,"first_seen":"2026-02-03T19:12:12.109589Z","last_seen":"2026-02-03T19:12:12.109589Z","alert_count":16,"request_count":16,"received_data":1859247,"sent_data":7371,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.222.174.117","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-01-28T12:24:09.896795Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-01T22:25:39.559997Z","alert_count":0,"request_count":1,"received_data":1338908,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dapp.weth1.site/static/js/pages-Polymeric-index~pages-exchange-exchange~pages-income-income~pages-index-coin~pages-index-index~0335db49.25b652bf.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb8e9423a0bf2752de41c2d8ceff4b64","sha1":"b9b8ef194662d2c6b1653e8ad4fb1abad52e1ff5","sha256":"df784cde3b4c6f7607ccd8dd73ca4aa26e39d4525731a7ac70098746124329a0","sha512":"284f32aeab7c8a70bf4e73e462269b748a9c20d51d83d40aebae0831419a804a3b6effd799ff1c14475ca4d1259ff279aaa9ffd887ff3e70cba4a86beb541af0","ssdeep":"768:v4lSPGRifrrgetyyxwuFqmdGKg2lnyN0u43pnr10b9:v4jif/tHNHzg2tTZnq","tlshash":"5bc2fb60f19ef43907f79b39e07b2d4d91243a2ff1149095fba199e288a954f2315f2c","size":26025,"data":"","first_seen":"2026-02-03T19:12:15.90995Z","last_seen":"2026-02-03T19:12:15.90995Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/js/pages-index-coin~pages-index-index~pages-index-recharge.4c2ae6a5.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"13b7eae6165c7bb87f8d73a7de7d05ac","sha1":"ccae8bdf7ccbfa0db78b11fc820b66e447c467c7","sha256":"283835e97282af1359199ea50cc6d25784717fae88fa7478d13fa780ab39675e","sha512":"0c339d17467a3394c24c2f2e11d5695bd73e78695e689ceb1e2a4001ccecb95c37807c6cb04a3555d21785e53393cb61ed899eeb989ee320db1aa98195e7f6cf","ssdeep":"384:I+n2qHK2UU37ccd+9khpuqnmCE0Ktd/5GXZShVbIp6vq9XV/WCKyx64AoXOoeGo0:ZndJUU3n+9khp1xEztd/5Gx9Myko","tlshash":"88b2cb31f216b8284d67cea9d0bb0a8821117f3bb006a055efd166bf48dd59b6335f9c","size":24121,"data":"","first_seen":"2026-02-03T19:12:15.880317Z","last_seen":"2026-02-03T19:12:15.880317Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"973e831379b94d060af9b2e9bc78f49e","sha1":"83448e2204ac7f3afafeb07ffa3d2b92a7e31ce2","sha256":"814148cbc3bea44c7786594a53ca13a6326ad08dfd73abbb11e82c285a15109b","sha512":"45e6d9b25a24e2c9a1c34173df38587cad6d7d85753f8211d4e0dff58e73be9e4cb99724024ead994c6cef70aaa958f9f15fb628bc9d83a52b39ca44844f8080","ssdeep":"","tlshash":"5c90027528c2201060173256547658e601308030d4588d51010498a1985543156065ac","size":49,"data":"","first_seen":"2023-04-11T21:45:58Z","last_seen":"2026-08-11T03:23:50.344213Z","times_seen":37813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0c95e5e18cee546f26c51a52ff0f709","sha1":"ddc84f78fad7fe73e3c5cf704fd85b0acc93acd1","sha256":"9c63143863d099febca4b2b55487b0594716be5cf8feccd79a9bfb58c77b74ca","sha512":"313971bba22b651041bf8e57407a4719709175bd02df21b7b98938d86ba204459c24df47d97b635907988718dec44875a42a4ceb4c345138b74548ecfd0fe9c5","ssdeep":"","tlshash":"78f0c09d5b5e62f04466be187f0534ca8838c1c45141846d3c4e5236f7b1c6707a9cc7","size":575,"data":"","first_seen":"2025-09-08T09:54:07.877893Z","last_seen":"2026-02-03T19:12:15.923025Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/js/chunk-vendors.72fd112b.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef7083386780bacc20e207d139558fb8","sha1":"3b1fb865a1e9fb6f9f0b09d06bd6d7fde70f410a","sha256":"377d608f9270b89c17f8d4a09ceb92d06b0afa81434efff0aa55f0d2936dcbf8","sha512":"2078dbe3e2da2aaefc4f000e07975d37f67c8d7aeae18a5991f32aed8130e20295331009c0b89c5a4dee9da2d721fc23ee954c140e82c742d241daf3308b25b3","ssdeep":"6144:YXH0480IGcUdDBAXtwTfF7cbM3XYmvwNT8GY3vm799a/hRV1vSz/eSgqi4q0:Y3bHXAdwTdzXY4wtqw9kvSz4qn","tlshash":"8e05f78df282b0b60ae760b5403f220bb2376959b40ac4d4f675e4d4ad7894e6237f7d","size":858306,"data":"","first_seen":"2026-02-03T19:12:15.884499Z","last_seen":"2026-02-03T19:12:15.884499Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/js/pages-Polymeric-history~pages-Polymeric-index~pages-coin-list-coin-list~pages-exchange-exchange~page~1f838e35.12c2104b.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1346caf49bb0774f1e581d429346f7ba","sha1":"8ff414ecaf208d27cba93bc66a685f5b640be7d7","sha256":"13866cfec323c91d0168f21cfdb520ee6c254dff7b910da771dfb727fc272be1","sha512":"3fb1624ca6e75db20f24bf2a7988d01065169fb64e4b43c759ee3ca0abcc8754e08ec4cadd7b54dcfa3f0eab812b28708aa0caf582b1f1b3d13167455c310fad","ssdeep":"768:kBRssRWNnB12yUgQnKb6QWm4AmCd0tG8e+W1MAbu7N8ChEAh8sd0Q2Z7wXDtJk:kB9WNnn2zsYId0FHoMqu7NdEAaM2OzY","tlshash":"98630ae1ec4c1cf0bb76c8e3e141365aabc2b776d885dc18e246964c0ce739b3256b58","size":68379,"data":"","first_seen":"2026-02-03T19:12:15.890129Z","last_seen":"2026-02-03T19:12:15.890129Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/js/pages-index-index.0fa6081a.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b34f2d932e2bd5118e57e35f7b5e555","sha1":"a02dbff1a7f892d1aac6c25b9c0f3fe7e77c49c1","sha256":"ca1b3be727453a20313332348804a6e7b1db5ec5177dbe3421307a41a4a1dde9","sha512":"0f6c14ddddc7b151ef4622ac760fc1cd3c0c6fefc9bf5d66d0bcc7402ad69c41ba2970600abf1be8a2a40b56217317dbff1ad3789d0fc61959a0a6c6a5ed92ec","ssdeep":"1536:o6OqYO4/BY8wP3t4/gT4yb/Z1wLZWf6F2kwbOfdT:nOq2inc","tlshash":"34735c74b842b03f4aebc66c90af1e0c59317d67e0c57158fbbe516a89ea2cb1354b1c","size":79478,"data":"","first_seen":"2026-02-03T19:12:15.912028Z","last_seen":"2026-02-03T19:12:15.912028Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/js/pages-income-income~pages-index-index.1e753985.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b07ea40d2da4063253f754563cb9fa17","sha1":"aff8a23fa0b8cac52d77d61b1172ef10d7fbbe69","sha256":"d869e77c8a2221fe616d9b9bf5746e077fd6eb577a084548bcd0e6ce19d67708","sha512":"8b4566d0f18970e0359246b5316b4bfcf192842e840935361f53f344efcd2f96de7c6d692cace5e388d74fbd0c84e4e5d85e1897f3717c55afd0f7470a1e567b","ssdeep":"3072:TWBctS7x/h3w/O8YaFV3R9wprFNqSffarfPa3Verx:qBjZqOS3R9wprFNqSfGrx","tlshash":"2a543bcdb38ab51683e32174242f610ab2377c14684ba850f339e9d66e5994e7377f38","size":290955,"data":"","first_seen":"2026-02-03T19:12:15.903043Z","last_seen":"2026-02-03T19:12:15.903043Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T03:40:29.327407Z","times_seen":741539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T03:40:29.327407Z","times_seen":741539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/web3/1.3.5/web3.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50b331ceab5cb032bac85cf6eaf4c513","sha1":"9b4f1751f59e6fb18b266d96adefff3b32ecdf48","sha256":"efeff3f4191acfc1a20fef7e327521c4a696edf0dca7a2d86d4045a49a5cde17","sha512":"4bf3be807e6ccecffefdd532966d79269fc9649b08a169694953304fac804b8461ee46b36915314b3141c27a84dbf8c1a6172bef1a2f4d025aa29884640ce2f8","ssdeep":"6144:9ggS4Whgg8WMRelCSJ70OSJeXiqP70X+C8kSlXnfCM7XZfcwJ4ywB8b2IRQFwfCD:K/K+C8R67GFCamsZKpams2JKAF","tlshash":"1c55d9c4b6907061c3666a90442f900ee33ef96d384d016dfa57ecf77cb8a89552af39","size":1337884,"data":"","first_seen":"2023-04-20T20:54:22Z","last_seen":"2026-08-09T10:09:43.007417Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7c2044589cd6c4afb8f708d8f4929ce","sha1":"0a1a91f258a6b31b5f24008bde88fe949fd00317","sha256":"20217fc70ebe327eee12ece90b2c8ad0e6f760234c316849f05b7e2a7d0ee931","sha512":"50894a9f5d6c19842e74141d8b09cfc2ed951ee4d75dd45343c8c9156064fabc2129acf0c4635cfba00be760064af9293e826d7df958097177d67e364bb11248","ssdeep":"","tlshash":"25c04cb4761959305659a22d7239e7d83dbb501130437547901c158d0cf4e945671ea9","size":159,"data":"","first_seen":"2023-03-07T12:06:42Z","last_seen":"2026-08-10T08:22:35.409584Z","times_seen":1447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e35f3565e98641c0174d284e8ddd26","sha1":"967e8443ce108fe2742f3ec46237a40560c67c35","sha256":"6fc1c4ed09be48bc1d695bba608ad0c9ff9a525edd88b1819bdf413e88960e82","sha512":"7b6ca8aea3dd9c4b83fda1914179c9957606363ee546540bdaa87d0ed099362681da51036c06bb3a8c6641946b69621d72154075f78b02b770ab1bddb3ac8a23","ssdeep":"","tlshash":"576000000000f00c00c0000c003000c000c0f00f000c0c303c0fcc00300000c0f3000c","size":14,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-08-10T08:22:35.412638Z","times_seen":1563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/js/index.d60553cc.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1338fd80661a3fc3732f8d9e4d97d3be","sha1":"e626a9afdeb46b036dd76459170230d79c49eeb8","sha256":"25f3fd6eb457f9daae9fcd26ff237ac0385f047697ed5b6eaeb59342e5ea3634","sha512":"cca6b7dfe96f1a12b0ee2e386cd6bfc8f118bbeb933dee1bb371be7aa229f8030a8b454b164bd490297b881de8161c124195f99c3f60f4b1d3acde20cb2d6a81","ssdeep":"1536:Hh7gSvvERuW8Wq4PyrRzs5Q0TK3+3t4u4XbpZrxj/gXxRnwzKz4yGXL+vgNTGcbK:HFEuW8WdPN1N4yGX6vI64e04YpSOK","tlshash":"cad3389a3bcadaf631c36031215b614422fcbc994c1d743937e8c4989b9bd196237bb7","size":142838,"data":"","first_seen":"2026-02-03T19:12:15.87233Z","last_seen":"2026-02-03T19:12:15.87233Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.app.weth1.site/api/index/index","fqdn":"api.app.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:50.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.app.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 15:49:27 GMT","end":"Fri, 10 Apr 2026 15:49:26 GMT"},"fingerprint":{"sha1":"AD:5C:93:7A:7E:16:63:38:5D:83:E4:69:68:96:46:76:60:7B:1A:6A","sha256":"F9:C0:16:06:AA:21:95:A1:49:FB:B5:98:04:2D:28:3C:1B:EA:B4:95:8B:B8:BD:55:BD:3D:14:D1:2E:0C:C4:34"}}},"request":{"raw":"OPTIONS /api/index/index HTTP/1.1\r\nHost: api.app.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dapp.weth1.site/\r\nOrigin: https://dapp.weth1.site\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:51 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, Accept-Language, Origin, Accept-Encoding, Authorization\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T03:57:29.375322Z","times_seen":17829662,"resource_available":true,"data":null}},"time_used":1444,"timings":{"blocked":592,"dns":74,"connect":253,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.app.weth1.site/api/index/index","fqdn":"api.app.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:51.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.app.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 15:49:27 GMT","end":"Fri, 10 Apr 2026 15:49:26 GMT"},"fingerprint":{"sha1":"AD:5C:93:7A:7E:16:63:38:5D:83:E4:69:68:96:46:76:60:7B:1A:6A","sha256":"F9:C0:16:06:AA:21:95:A1:49:FB:B5:98:04:2D:28:3C:1B:EA:B4:95:8B:B8:BD:55:BD:3D:14:D1:2E:0C:C4:34"}}},"request":{"raw":"POST /api/index/index HTTP/1.1\r\nHost: api.app.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 34\r\nOrigin: https://dapp.weth1.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"id\":\"\",\"token\":\"\",\"lang_type\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, Accept-Language, Origin, Accept-Encoding, Authorization\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"96a9f56fb2b982bbde1472f16dddd818","sha1":"dfdb9aab2c82eb28fa46c96743da72603f77985e","sha256":"d927d21e01d49756658dfbfa7fc71b661df65675eb8b702f3aad968a29527874","sha512":"edd7eb6d04faca8465dcf35c43e091741704b0eaeec057f9e01cccbdc5678ab839e2bf344e02496788ca18a8fccf7519a5d7922e6583397882a8158233bdea31","ssdeep":"","tlshash":"76900204154e29e21501d46cd05889e14118125b4860876059f89b16632c151549346a","first_seen":"2026-02-03T19:12:15.864951Z","last_seen":"2026-02-03T19:12:15.864951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.app.weth1.site/api/Pledge/jumpUrl","fqdn":"api.app.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:51.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.app.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 15:49:27 GMT","end":"Fri, 10 Apr 2026 15:49:26 GMT"},"fingerprint":{"sha1":"AD:5C:93:7A:7E:16:63:38:5D:83:E4:69:68:96:46:76:60:7B:1A:6A","sha256":"F9:C0:16:06:AA:21:95:A1:49:FB:B5:98:04:2D:28:3C:1B:EA:B4:95:8B:B8:BD:55:BD:3D:14:D1:2E:0C:C4:34"}}},"request":{"raw":"POST /api/Pledge/jumpUrl HTTP/1.1\r\nHost: api.app.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 34\r\nOrigin: https://dapp.weth1.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"id\":\"\",\"token\":\"\",\"lang_type\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, Accept-Language, Origin, Accept-Encoding, Authorization\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0feedbab30f1d24b576f0583c27e6614","sha1":"b863d078f34ebe336e32133febcfe4a598dbbc9b","sha256":"47b3b5f7a4d4ec26f71a15f80e9945f104ad9b294dd7b5dd524d7a95a55adc7c","sha512":"cfe28cd9135e9f7007c075969ec4530aabc5f10deec36d1734a53771b88d5d751a33edbafadaf6b614a850f460c807cf88027874efc18f788d950cdec9d8c58a","ssdeep":"","tlshash":"d4b01200001e14b30447b48450044b8151bc615d98000b509bceea5d761c04c100b417","first_seen":"2026-02-03T19:12:15.868083Z","last_seen":"2026-02-03T19:12:15.868083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/common/register3.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:48.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /common/register3.js HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T03:57:40.548903Z","times_seen":548668,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/js/index.d60553cc.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:48.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /static/js/index.d60553cc.js HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 11 Jan 2026 09:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696369d0-22df6\"\r\nexpires: Wed, 04 Feb 2026 07:11:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142838,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48670), with no line terminators","md5":"1338fd80661a3fc3732f8d9e4d97d3be","sha1":"e626a9afdeb46b036dd76459170230d79c49eeb8","sha256":"25f3fd6eb457f9daae9fcd26ff237ac0385f047697ed5b6eaeb59342e5ea3634","sha512":"cca6b7dfe96f1a12b0ee2e386cd6bfc8f118bbeb933dee1bb371be7aa229f8030a8b454b164bd490297b881de8161c124195f99c3f60f4b1d3acde20cb2d6a81","ssdeep":"1536:Hh7gSvvERuW8Wq4PyrRzs5Q0TK3+3t4u4XbpZrxj/gXxRnwzKz4yGXL+vgNTGcbK:HFEuW8WdPN1N4yGX6vI64e04YpSOK","tlshash":"cad3389a3bcadaf631c36031215b614422fcbc994c1d743937e8c4989b9bd196237bb7","first_seen":"2026-02-03T19:12:15.87233Z","last_seen":"2026-02-03T19:12:15.87233Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1026,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1026,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/favicon.ico","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:50.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:50 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T03:57:40.548903Z","times_seen":548668,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.app.weth1.site/api/Pledge/jumpUrl","fqdn":"api.app.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:50.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.app.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 15:49:27 GMT","end":"Fri, 10 Apr 2026 15:49:26 GMT"},"fingerprint":{"sha1":"AD:5C:93:7A:7E:16:63:38:5D:83:E4:69:68:96:46:76:60:7B:1A:6A","sha256":"F9:C0:16:06:AA:21:95:A1:49:FB:B5:98:04:2D:28:3C:1B:EA:B4:95:8B:B8:BD:55:BD:3D:14:D1:2E:0C:C4:34"}}},"request":{"raw":"OPTIONS /api/Pledge/jumpUrl HTTP/1.1\r\nHost: api.app.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dapp.weth1.site/\r\nOrigin: https://dapp.weth1.site\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:51 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, Accept-Language, Origin, Accept-Encoding, Authorization\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T03:57:29.375322Z","times_seen":17829662,"resource_available":true,"data":null}},"time_used":1471,"timings":{"blocked":604,"dns":75,"connect":263,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.222.174.117","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:51.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Wed, 04 Feb 2026 15:11:52 GMT\r\ncache-control: max-age=72000\r\nset-cookie: __uni__uid=rBEQa2mCSHig/6H5AxuNAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-10T18:54:13.738025Z","times_seen":20195,"resource_available":false,"data":null}},"time_used":1582,"timings":{"blocked":659,"dns":1,"connect":264,"send":0,"wait":264,"receive":0,"ssl":389},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T19:11:47.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:48 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 11 Jan 2026 09:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696369d0-626\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1574,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (473)","md5":"9b2fce12955c5c912f4107a3969baceb","sha1":"6cc2fd970e659d5f00bf68de1bda5af4d685b1ae","sha256":"98c2884bf042f62e82febf5ba48637055c2cf4b5870112a05b2808756dd0e172","sha512":"8b83104b13be9fb14e58f537acbcba9dfc718cc62b5d8336e4b97df10b942ec626fc3310d3ae5488ec7a3a18465a3143e1268ae438d9348aadfefde4c96c36a9","ssdeep":"","tlshash":"d13162da2f0ce2741621aa443f35f2cd487d85812841c8557c8d2abdbfe0f894fb9c85","first_seen":"2026-02-03T19:12:15.876929Z","last_seen":"2026-02-03T19:12:15.876929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1414,"timings":{"blocked":576,"dns":61,"connect":257,"send":0,"wait":257,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/js/pages-index-coin~pages-index-index~pages-index-recharge.4c2ae6a5.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:50.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /static/js/pages-index-coin~pages-index-index~pages-index-recharge.4c2ae6a5.js HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 11 Jan 2026 09:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696369d0-5e3f\"\r\nexpires: Wed, 04 Feb 2026 07:11:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24127,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22641), with no line terminators","md5":"13b7eae6165c7bb87f8d73a7de7d05ac","sha1":"ccae8bdf7ccbfa0db78b11fc820b66e447c467c7","sha256":"283835e97282af1359199ea50cc6d25784717fae88fa7478d13fa780ab39675e","sha512":"0c339d17467a3394c24c2f2e11d5695bd73e78695e689ceb1e2a4001ccecb95c37807c6cb04a3555d21785e53393cb61ed899eeb989ee320db1aa98195e7f6cf","ssdeep":"384:I+n2qHK2UU37ccd+9khpuqnmCE0Ktd/5GXZShVbIp6vq9XV/WCKyx64AoXOoeGo0:ZndJUU3n+9khp1xEztd/5Gx9Myko","tlshash":"88b2cb31f216b8284d67cea9d0bb0a8821117f3bb006a055efd166bf48dd59b6335f9c","first_seen":"2026-02-03T19:12:15.880317Z","last_seen":"2026-02-03T19:12:15.880317Z","times_seen":1,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/web3/1.3.5/web3.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:48.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/web3/1.3.5/web3.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 19:11:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 219883\r\ncf-ray: 9c843c77bf3b7129-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"606b8a3c-146a1c\"\r\nlast-modified: Mon, 05 Apr 2021 22:07:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 441245\r\nexpires: Sun, 24 Jan 2027 19:11:48 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3YnI9%2B1tuJMsFEio6Ka668IRr2BSEOdR7gyfLMZ0cFaRqQ8zxNcCDmiQFQ6Jawruq8JaU35NzcQkOYgOnFKu8oyhuJKjajoig7CU%2FiZzhfVFcXjAcl2AQ23iI%2Fsr7Mj%2FesMfj%2Ft2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1337884,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (63842)","md5":"b8264772685dd79e72d854b4619a603b","sha1":"b96164dd553333d7894997093457f04b0c0766e8","sha256":"ececd85853602912a75e478ab98b9f5a0d8a21f3f6e392b475a37f920ebe7b6f","sha512":"73cbea194f7067ef594a90ff82a2ab7af43bf975d33c3e3ecd3c306a9747be19574451d882d36fd1397a9f69a72eb8fce38cd2e5e8499dc3a78d418d774d347c","ssdeep":"6144:9ggS4Whgg8WMRelCSJ70OSJeXiqP70X+C8kSlXnfCM7XZfcwJ4ywB8b2IRQFw3:K/K+C8R67GV","tlshash":"7f2597c0b6907056c3656e91442f900ae33efe693c4d0169fa57ecf37cb8a85552af3a","first_seen":"2025-08-21T03:25:46.594345Z","last_seen":"2026-08-09T10:09:42.942292Z","times_seen":82,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":15,"receive":18,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/js/chunk-vendors.72fd112b.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:48.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /static/js/chunk-vendors.72fd112b.js HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 11 Jan 2026 09:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696369d0-d18c2\"\r\nexpires: Wed, 04 Feb 2026 07:11:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":858306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46722)","md5":"ef7083386780bacc20e207d139558fb8","sha1":"3b1fb865a1e9fb6f9f0b09d06bd6d7fde70f410a","sha256":"377d608f9270b89c17f8d4a09ceb92d06b0afa81434efff0aa55f0d2936dcbf8","sha512":"2078dbe3e2da2aaefc4f000e07975d37f67c8d7aeae18a5991f32aed8130e20295331009c0b89c5a4dee9da2d721fc23ee954c140e82c742d241daf3308b25b3","ssdeep":"6144:YXH0480IGcUdDBAXtwTfF7cbM3XYmvwNT8GY3vm799a/hRV1vSz/eSgqi4q0:Y3bHXAdwTdzXY4wtqw9kvSz4qn","tlshash":"8e05f78df282b0b60ae760b5403f220bb2376959b40ac4d4f675e4d4ad7894e6237f7d","first_seen":"2026-02-03T19:12:15.884499Z","last_seen":"2026-02-03T19:12:15.884499Z","times_seen":1,"resource_available":true,"data":null}},"time_used":771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":771,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/js/pages-Polymeric-history~pages-Polymeric-index~pages-coin-list-coin-list~pages-exchange-exchange~page~1f838e35.12c2104b.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:50.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /static/js/pages-Polymeric-history~pages-Polymeric-index~pages-coin-list-coin-list~pages-exchange-exchange~page~1f838e35.12c2104b.js HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 11 Jan 2026 09:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696369d0-10d09\"\r\nexpires: Wed, 04 Feb 2026 07:11:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68873,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64642), with no line terminators","md5":"1346caf49bb0774f1e581d429346f7ba","sha1":"8ff414ecaf208d27cba93bc66a685f5b640be7d7","sha256":"13866cfec323c91d0168f21cfdb520ee6c254dff7b910da771dfb727fc272be1","sha512":"3fb1624ca6e75db20f24bf2a7988d01065169fb64e4b43c759ee3ca0abcc8754e08ec4cadd7b54dcfa3f0eab812b28708aa0caf582b1f1b3d13167455c310fad","ssdeep":"768:kBRssRWNnB12yUgQnKb6QWm4AmCd0tG8e+W1MAbu7N8ChEAh8sd0Q2Z7wXDtJk:kB9WNnn2zsYId0FHoMqu7NdEAaM2OzY","tlshash":"98630ae1ec4c1cf0bb76c8e3e141365aabc2b776d885dc18e246964c0ce739b3256b58","first_seen":"2026-02-03T19:12:15.890129Z","last_seen":"2026-02-03T19:12:15.890129Z","times_seen":1,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static//index/menu.png","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:50.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /static//index/menu.png HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 131\r\nlast-modified: Sun, 11 Jan 2026 09:13:52 GMT\r\netag: \"696369d0-83\"\r\nexpires: Thu, 05 Mar 2026 19:11:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 30, 2-bit colormap, non-interlaced","md5":"4d495cd28e2aca27c4904496924bdb4c","sha1":"45b08d2d0058ace7d5d9bd97d45bbc8ed2705b10","sha256":"5aa2df1ccefad8f01647ad12feb77cd8c18c00c8eef7e6e9b8b7f305611428a6","sha512":"9cd751fb5e2ca0da62ca81acc3658b66b2906ceb3560ed89047cf99beaa82f4e621f9a2a19543f9893da3121a88794e788565c773542a429fc81ec640a39bdee","ssdeep":"","tlshash":"17c09be356450d25cb20492b471c7d51f7583129621895471945d0e5655b208d6cda4a","first_seen":"2025-09-08T09:54:07.854773Z","last_seen":"2026-02-03T19:12:15.893218Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.app.weth1.site/api/wallet/lun","fqdn":"api.app.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:51.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.app.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 15:49:27 GMT","end":"Fri, 10 Apr 2026 15:49:26 GMT"},"fingerprint":{"sha1":"AD:5C:93:7A:7E:16:63:38:5D:83:E4:69:68:96:46:76:60:7B:1A:6A","sha256":"F9:C0:16:06:AA:21:95:A1:49:FB:B5:98:04:2D:28:3C:1B:EA:B4:95:8B:B8:BD:55:BD:3D:14:D1:2E:0C:C4:34"}}},"request":{"raw":"POST /api/wallet/lun HTTP/1.1\r\nHost: api.app.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 34\r\nOrigin: https://dapp.weth1.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"id\":\"\",\"token\":\"\",\"lang_type\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, Accept-Language, Origin, Accept-Encoding, Authorization\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"07b0c436ff149e9110d69106a8921097","sha1":"805fa5a3aa8582bbde03097638c142aedaf29644","sha256":"2a9756de9bf523b86443892a4ebe4daf31231090940fe25b6c84fcd3575ed228","sha512":"efd07a3de685ef274aa75fea4928d37f99dd2b79594f1d0c3e7587dca085da42a53366ae8dddae260f0046b46cb93054435ec9b150eb2f0820d5adb47c4db3b1","ssdeep":"","tlshash":"e3c02b0200cd34fe0000bc3c8c38ce51908c0512cd031704df8d9f10a22f20020034ab","first_seen":"2026-02-03T19:12:15.90094Z","last_seen":"2026-02-03T19:12:15.90094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/js/pages-income-income~pages-index-index.1e753985.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:50.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /static/js/pages-income-income~pages-index-index.1e753985.js HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 11 Jan 2026 09:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696369d0-4708b\"\r\nexpires: Wed, 04 Feb 2026 07:11:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":290955,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65058), with no line terminators","md5":"b07ea40d2da4063253f754563cb9fa17","sha1":"aff8a23fa0b8cac52d77d61b1172ef10d7fbbe69","sha256":"d869e77c8a2221fe616d9b9bf5746e077fd6eb577a084548bcd0e6ce19d67708","sha512":"8b4566d0f18970e0359246b5316b4bfcf192842e840935361f53f344efcd2f96de7c6d692cace5e388d74fbd0c84e4e5d85e1897f3717c55afd0f7470a1e567b","ssdeep":"3072:TWBctS7x/h3w/O8YaFV3R9wprFNqSffarfPa3Verx:qBjZqOS3R9wprFNqSfGrx","tlshash":"2a543bcdb38ab51683e32174242f610ab2377c14684ba850f339e9d66e5994e7377f38","first_seen":"2026-02-03T19:12:15.903043Z","last_seen":"2026-02-03T19:12:15.903043Z","times_seen":1,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/index/index-3.png","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:50.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /static/index/index-3.png HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 11 Jan 2026 09:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696369d0-f853\"\r\nexpires: Thu, 05 Mar 2026 19:11:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"50fee05508f58ab196286647d67d90e4","sha1":"b9b748fcd81748074cc58c5dd727571c55d3952f","sha256":"fbdec2c3da4db154bac5adf7871896842d595fb8935f189703f5e5f214f1470a","sha512":"fa684a52e71886eed5eec728d355668424e45a7f213a5800122c941a8750fa4e0fe543d833c31de84399598a5c32530bc4804b8579d73a31a9c1c55dbbcb9d06","ssdeep":"1536:HAaFuRZqcrcZLeGybB/m7urcHUT/GgpBolql3+cDs8Pd0:g6uRZqc79bB/m7szfUepd0","tlshash":"365302707b9c1b65dfbe21bd1f5e5e7f3333260e2283598e06604c9c98d9676280726e","first_seen":"2026-02-03T19:12:15.905601Z","last_seen":"2026-02-03T19:12:15.905601Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/index.2da1efab.css","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:48.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /static/index.2da1efab.css HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 11 Jan 2026 09:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696369d0-178f9\"\r\nexpires: Wed, 04 Feb 2026 07:11:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96505,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73ae6c583d02d78f81e3f18860a2899a","sha1":"07df9233fc11dddc34fbf519b891d40b2ac29c0f","sha256":"e97de9a247807f12d74101e9f736250b2410be4e1ed3d17ed875e4b08cf66c83","sha512":"da54ba9dbe06d8d763f3cfd64cf5babb54e761e3208c7a2f23e845290c48db8c115bb86c24262cd6c9a96ff2e51674c6d86439e1814baf2de7980f5c06349921","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nKhlvbc:VApuK7hmVrS1Wu3iG41nKPI","tlshash":"1893f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2024-01-02T00:07:11Z","last_seen":"2026-08-10T18:21:08.401289Z","times_seen":6424,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/js/pages-Polymeric-index~pages-exchange-exchange~pages-income-income~pages-index-coin~pages-index-index~0335db49.25b652bf.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:50.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /static/js/pages-Polymeric-index~pages-exchange-exchange~pages-income-income~pages-index-coin~pages-index-index~0335db49.25b652bf.js HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 11 Jan 2026 09:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696369d0-6797\"\r\nexpires: Wed, 04 Feb 2026 07:11:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26519,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19355)","md5":"eb8e9423a0bf2752de41c2d8ceff4b64","sha1":"b9b8ef194662d2c6b1653e8ad4fb1abad52e1ff5","sha256":"df784cde3b4c6f7607ccd8dd73ca4aa26e39d4525731a7ac70098746124329a0","sha512":"284f32aeab7c8a70bf4e73e462269b748a9c20d51d83d40aebae0831419a804a3b6effd799ff1c14475ca4d1259ff279aaa9ffd887ff3e70cba4a86beb541af0","ssdeep":"768:v4lSPGRifrrgetyyxwuFqmdGKg2lnyN0u43pnr10b9:v4jif/tHNHzg2tTZnq","tlshash":"5bc2fb60f19ef43907f79b39e07b2d4d91243a2ff1149095fba199e288a954f2315f2c","first_seen":"2026-02-03T19:12:15.90995Z","last_seen":"2026-02-03T19:12:15.90995Z","times_seen":1,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/js/pages-index-index.0fa6081a.js","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:50.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /static/js/pages-index-index.0fa6081a.js HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 11 Jan 2026 09:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696369d0-13864\"\r\nexpires: Wed, 04 Feb 2026 07:11:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79972,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63528), with no line terminators","md5":"3b34f2d932e2bd5118e57e35f7b5e555","sha1":"a02dbff1a7f892d1aac6c25b9c0f3fe7e77c49c1","sha256":"ca1b3be727453a20313332348804a6e7b1db5ec5177dbe3421307a41a4a1dde9","sha512":"0f6c14ddddc7b151ef4622ac760fc1cd3c0c6fefc9bf5d66d0bcc7402ad69c41ba2970600abf1be8a2a40b56217317dbff1ad3789d0fc61959a0a6c6a5ed92ec","ssdeep":"1536:o6OqYO4/BY8wP3t4/gT4yb/Z1wLZWf6F2kwbOfdT:nOq2inc","tlshash":"34735c74b842b03f4aebc66c90af1e0c59317d67e0c57158fbbe516a89ea2cb1354b1c","first_seen":"2026-02-03T19:12:15.912028Z","last_seen":"2026-02-03T19:12:15.912028Z","times_seen":1,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/index/index-1.png","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:50.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /static/index/index-1.png HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 11 Jan 2026 09:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696369d0-eda0\"\r\nexpires: Thu, 05 Mar 2026 19:11:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60832,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 196, 8-bit/color RGB, non-interlaced","md5":"99569aba66002ba1d09e6439ce7eff7c","sha1":"318948884f1d94601b13a5f9c6263a0a91c808be","sha256":"5324ae1059b971e687c9d00bfeb498581156b825d2bb9bf499f75344819f7e54","sha512":"3da891c1e7fa70f4623551874afb57693d136f924f144661d36f95c70c9a3bd9ad83f78714bdc0d681da5aa21156d8e665bc8f8c7ad64a491f7223e740eae981","ssdeep":"1536:DBK1/I4sSKFBemQHQFOYmiF3Xgm3msB9cPzANG:DI1/NbyemIQFO3iFHgm3m89Yd","tlshash":"b553f180781ac01bc868dfde659ea2906e2f7da633711b4c200eebd4579fc43da7d182","first_seen":"2026-02-03T19:12:15.913867Z","last_seen":"2026-02-03T19:12:15.913867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.app.weth1.site/api/wallet/lun","fqdn":"api.app.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:50.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.app.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 15:49:27 GMT","end":"Fri, 10 Apr 2026 15:49:26 GMT"},"fingerprint":{"sha1":"AD:5C:93:7A:7E:16:63:38:5D:83:E4:69:68:96:46:76:60:7B:1A:6A","sha256":"F9:C0:16:06:AA:21:95:A1:49:FB:B5:98:04:2D:28:3C:1B:EA:B4:95:8B:B8:BD:55:BD:3D:14:D1:2E:0C:C4:34"}}},"request":{"raw":"OPTIONS /api/wallet/lun HTTP/1.1\r\nHost: api.app.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dapp.weth1.site/\r\nOrigin: https://dapp.weth1.site\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:51 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, Accept-Language, Origin, Accept-Encoding, Authorization\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T03:57:29.375322Z","times_seen":17829662,"resource_available":true,"data":null}},"time_used":1466,"timings":{"blocked":602,"dns":73,"connect":263,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/index/index-0.png","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:50.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /static/index/index-0.png HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 11 Jan 2026 09:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696369d0-12d5b\"\r\nexpires: Thu, 05 Mar 2026 19:11:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77147,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"0bf2aa38a8b902e5071cd4e0f3660b42","sha1":"fcab21d3d576018c4e915f1a51253aee232738e8","sha256":"cb8db4fbbe5a22bc67f98d5ce03ad37f8b722feb1f14991d0273d6cf434b821a","sha512":"740cadee84cd3f4f2bf6a85f40946595a0bf407879506a1ddd1141db7e74893b0c66b185869a45b5ff023a047e18ae1932a15b3c4b9977dec7edb161a09feedc","ssdeep":"1536:o6dPOywVT2hSRPrhvYEv9J/A8oc2ZKJn6Jfb/WPuaRmQnzinW+d:oTVih+9vVoDZsn6JfbOPJenJ","tlshash":"b27302c778ccb8581dac639c793790e3f6bb1a36694983bb1148046c62611fafb651ac","first_seen":"2026-02-03T19:12:15.915775Z","last_seen":"2026-02-03T19:12:15.915775Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.weth1.site/static/index/index-6.png","fqdn":"dapp.weth1.site","domain":"weth1.site","tld":"site"},"ip":{"addr":"154.38.114.194","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.weth1.site/","date":"2026-02-03T19:11:50.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.weth1.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 16:14:25 GMT","end":"Fri, 10 Apr 2026 16:14:24 GMT"},"fingerprint":{"sha1":"69:DC:9E:79:D2:FE:71:BA:E8:B5:02:BF:E3:84:C6:B6:17:4B:F8:DF","sha256":"AC:D9:B7:82:8B:5C:AF:C8:48:97:A7:45:2C:2A:50:E8:36:3B:63:72:A8:C5:19:3A:DE:50:A2:11:B4:B8:95:D3"}}},"request":{"raw":"GET /static/index/index-6.png HTTP/1.1\r\nHost: dapp.weth1.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.weth1.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:11:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 11 Jan 2026 09:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696369d0-eab3\"\r\nexpires: Thu, 05 Mar 2026 19:11:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60083,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"0db54e0fd54f5be25d3e5e5ec98c58ba","sha1":"c571bba2ff2aaca52a1b845230dbf68b61db5c53","sha256":"56201941a1c0135ae04989fddcb862f84055fd0ba96294b42f89c3b9c295b81c","sha512":"44545518800222e3d39a27bcaead4ee06d9fb5bfc9d5b95563c89db0a55b63e79289a03139d71bc440d88d69b8d57c6b0cf489db41d667375b2a4bb00931a126","ssdeep":"1536:NCuf/rEyBVjuSZQylkucftNid4Z+360qVbVVw:NCWTEcNZQylk3fq4Z+360obVVw","tlshash":"ca430281690225801bdbbfea016bedc528fb1ec3576a74cb1d0b34890a5cb9cf55f09b","first_seen":"2026-02-03T19:12:15.918794Z","last_seen":"2026-02-03T19:12:15.918794Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.weth1.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}