{"report_id":"f9806d9f-c03a-4a8a-a543-bedff7fa4818","version":6,"status":"done","tags":[],"date":"2026-01-11T06:33:01Z","url":{"schema":"https","addr":"keplr.top/","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"104.21.78.192","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"keplr.top/#/","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"title":"Keplr","dom":{"size":786805,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6828)","md5":"98d0f28e927fa74d414b39b9f817ae9d","sha1":"193e1039725157a0a4a207e81c249b6fa1b3eaf7","sha256":"ff3e4d6f1d6328e41c391e326cbae3dd77b3d6ca9f80e1e2e60e2c2493f2414d","sha512":"ee5b569fa5990a5a3339191f5449ea6041f646aa8a9ea4747c56d5b0ad5a093349a27b18b35f4d9a444d75e639b30be90fb0fef285eb7c10c08234a2267bf2d0","ssdeep":"6144:I2ZmgcaqJDCf21ifMSOyDUrr7fnFLPy9T:I2ZaJDj5SOhr3nVyN","tlshash":"ebf4a5216f17343de12fc9e2d1c1b9a8b711db2287569be7fa41392bcfc1689123261d","dom_hash":"domhash0b6bd5d24d20ff3dd64f912e3b2d902e","first_seen":"2026-01-11T06:33:12.914299Z","last_seen":"2026-01-11T06:33:12.914299Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"keplr.top/","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"104.21.78.192","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-15T06:33:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"keplr.top","ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-11","domain_rank":0,"first_seen":"2026-01-11T06:33:04.660102Z","last_seen":"2026-01-11T06:33:04.660102Z","alert_count":32,"request_count":32,"received_data":5761850,"sent_data":13978,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"socket.keplrvip.vip","ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-11-11","domain_rank":0,"first_seen":"2026-01-11T06:32:53.096957Z","last_seen":"2026-01-11T06:32:55.02523Z","alert_count":22,"request_count":22,"received_data":126289,"sent_data":11127,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.220.203.60","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-01-05T13:13:41.270215Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"keplr.top/static/js/pages-my-components-order_list.17ffd33a.js","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1de077c513c10dbb5a16032344d00220","sha1":"adba1558eb057179308654167bb16be70b71a087","sha256":"1e8ea1b8d63e64535724de8e2c1edda6d9859a8e6cf49af038561602aa2fa186","sha512":"2c41bc29e272a0524e020bdfbf23a2bd833ba1eb931d21fde5aa34487f03ac1628a225153ee29f787f41c20885eb813135ecd7b6565f1bbf53e1367a9b12c982","ssdeep":"384:jY2IyV2Afj3yWQ/iwHAr2rFhoExW+UT6Kp40rRdgKqr1URI:jYtPtWlr2xOExW+UTDp40rRdgKm1oI","tlshash":"cdd28514748be1af4c4f8061302f6e2591321eb1d610e989f77ad9f54bd4cca3a29bbc","size":29428,"data":"","first_seen":"2026-01-11T06:33:02.932923Z","last_seen":"2026-01-11T06:33:12.981966Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/js/pages-index-home.d8e63fd6.js","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de30d53ccfe94c085d8d004e588c1af1","sha1":"342c889f1d4c905efc26432f21e6355de2be7e15","sha256":"e3b532a0296d0eaee495b0984441867d2d08c20ceeb2d632d2c1c8bff96c8e2b","sha512":"733534448bb004a53f0f29bbb5523ec4b8a462bb6a1ecf5b78ecd43fc612ed14d0db1e95753616288308a27bac9a5fb50ffb75f129ac635b1cedad08cf266684","ssdeep":"1536:IW/CghT9RB4K6OWDZgs2zTHJRD2WGvrFjQRtAcqv/7acZ2cxWlSKmskj4kH/eg3x:xhfzKD/6THJRCbr+q0lYeq","tlshash":"d11495187183f1af8c4f9465302f1d25d0325eb1d614e44afbbeca954bd5cca3a26bac","size":196123,"data":"","first_seen":"2026-01-11T06:33:03.043674Z","last_seen":"2026-01-11T06:33:12.968966Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"93368157fb131b56a45d6f60f8b40342","sha1":"ea2a25edb7b00c3e0a06650f02fded5bd87dfa20","sha256":"c48d4859bc082aa591168f7d7230bef438ecc2b3074e707c83864e11ec1a891f","sha512":"366c90d022f7fd6718d76460de51a154cf6cf8bf8e3aefa2e0e736cbba24ec53506485331abd3c3c2a7e6ae00c9a3b957a9aa675ecdd389afca7863ad8365908","ssdeep":"","tlshash":"c8e068c260a6294c02208016304ac1031bb608729ec149613c4c67a58fb9f4bc46e859","size":352,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-08-12T00:09:59.79809Z","times_seen":7173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/js/chunk-vendors.c8fd9668.js","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77e82d3d93cec8b03cdc4fe00c889722","sha1":"8dd8b2c49174f0c20893e4dd14e3855c0fc65bb7","sha256":"29dff00e4b86ba78bb6fb6ebe75a827f8416b8ec2a48238c462be52a51a818ca","sha512":"ee2a46dc6c7435a7f346f3e55ecd1a873ad78e5aab73338242c9c8faee88c410f54a33559e89e05d0d03b7694dadc354bd6c9e96e1804f76fe3880e555909e65","ssdeep":"24576:7E+0JaMweI5HwyUl5KrHG9p0TUiefKdKOO:7E+0JaMweIyZCrHG9p0TUiefKwOO","tlshash":"94854b8d73c2b07647e3a1b4102f210bb33b5a69a8098498f675e4d9ad7994d133bf3d","size":1825959,"data":"","first_seen":"2026-01-11T06:33:03.051659Z","last_seen":"2026-01-11T06:33:12.985734Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/js/index.b16a3f82.js","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6218af1576dd3b28baeca1bad73799a5","sha1":"b04326734674e087e757553ccd5dcd2a975506c7","sha256":"6dc8c08f0d70ca64dae41f3054079c4e64ff83fdb90124bb8f3359809679bb4e","sha512":"6e3da3d1769745bfa7960f5a93f32cbb4c26431521e1b7b38cea3b9e40ee49f2a0110e5c994c5525acedaa4e5d7663c5e44d11d88b3024fb4a55fb8edb92674c","ssdeep":"12288:M1oe5o1xlif48dK4LHYNBj2qYCTQZaJDwNe:9pDwe","tlshash":"9ce4d551bf95383cc11f89a3d2c376f8f3214f25a78ae6d3da956927ca8079e123512c","size":694842,"data":"","first_seen":"2026-01-11T06:33:03.054703Z","last_seen":"2026-01-11T06:33:12.986603Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/js/pages-index-index.3e277664.js","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"114bedc71f3b2a09fcd167adaf17375e","sha1":"351f4821b97e09b2c4a11902517fe8428e63c136","sha256":"d1d6c3b109a01a2d088fb72526304dc8024bcf0f8553598e5904fe08517b52d6","sha512":"fcf419b538879ff9f5e7838d804d32ea06f54973c97602f824af72d51720ba0fa97766ec9c432e6584e1e7478ec4d3b251626d841321b50a72af3e0867d3a1fd","ssdeep":"1536:+XR2xssEsYId0FHoMqu7NdEAaM2OhFRDHysj4CZrDux:8Rsp0NVr7fnaMqsj4CZq","tlshash":"1da32991b10e58ee2f6bc8866205171db471bf31c524bc58f37b955c0ef2aca2758bac","size":101000,"data":"","first_seen":"2026-01-11T06:33:03.046715Z","last_seen":"2026-01-11T06:33:12.943864Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/js/pages-my-index.b2014987.js","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97a2ae3936c6af6c28f3bda02f6ab025","sha1":"710ed10133d87e8a3dcd09ac2c2e90fa7d3a6ff3","sha256":"cc9105cb267b10ed68ba3100f8f246902af65eaf08e8c3c447b07689df3928f9","sha512":"4c26aa6e5038781dad9484adec23daeddc5e826c4406aba7d0a820f8dc7a3837d6a50fbbdeaa36109c7cc717c8b9a451b673c3d4b53178572015eb29f8156391","ssdeep":"1536:lmfvzaS2P7r8Lin3WtgZEIitBQp85bHH3EeWQQoFS3B7PSz0ZgaFZ9U:lmTy3yBQoTc3o70yam","tlshash":"6304760d7287e1af4c1f9461302f1f2491366eb59114d48ab778de954bc8cda3a3abbc","size":182061,"data":"","first_seen":"2026-01-11T06:33:03.045388Z","last_seen":"2026-01-11T06:33:12.966451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/js/pages-my-components-market_list.cf63a260.js","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad64d38ff3632fb1cf0ce886c0e9a151","sha1":"aaa6f22459bafe5c89dfc7ad10b8cc1397f8ddfc","sha256":"bdb9730c52d4a1b411a3c97e9fc571ed7bc43bdffadf868fd1a02d65a780519d","sha512":"6fc29296322fa832259d54a192939fc3715826976a1ad15beabbc2280b65c89fee0dd7d123b42be3c0315fcd8ee7a1fb02a06f25333a8f5f119d21b5b61921f9","ssdeep":"384:jw62J/Ccr9ynWPg7LiCSLxRjOAb4Abb9Ui259yhAun9C6It:s6ACcr9ynWPgf8xBXF9i","tlshash":"70d26614389be19f8c1f9461703e2e2561315fb29720d84db77be9e54bc4cc63a2a7ac","size":30512,"data":"","first_seen":"2026-01-11T06:33:02.935122Z","last_seen":"2026-01-11T06:33:12.941416Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"keplr.top/static/imgs/w3.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/w3.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 15360\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-3c00\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7yg3HjRSxJcxMJSWT7HgMZz0ykjO4Mms78aODAebIkCKMPjV0oMkEMcfI4sRhKOa%2F93hjjCQ4yGZEy70%2F93aH5RN7jg5%2FV%2BmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6989f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 292 x 200, 8-bit/color RGBA, non-interlaced","md5":"d31a5d844cc103835f3b14859dc05160","sha1":"7914f4f03fcbb14a360e23c6738287f66ae477d6","sha256":"0c20f3d9c158f0932a06763d01d838d37527be93874b28f9065aec6d3f93fe34","sha512":"6ce81a900e1cc3324ffab9774f6ccb5a8fed06d17820fea6a4c295b1c1d99e66f22320f92c92e3757c5f1711f9da361be0fcb4c8c2d05b3989467546f1a5f8c4","ssdeep":"384:ZFg6FwfGSkcKkz4QvRoaDU0Xq0EcBAJWsgD/CgKalQr5V:40hSkcvz4QpoaDUqpBqWualQT","tlshash":"4662d034342d429e74bc59a4d8bbfbd71103de8671d34d48a97e4376b13c688285c3e8","first_seen":"2026-01-11T06:33:02.94473Z","last_seen":"2026-01-11T06:34:42.374363Z","times_seen":3,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/item1.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/item1.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 111962\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-1b55a\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PxyzG4SpNCznN%2BlLxJW7tjVfiiervwFLsFs%2B3u3CGDtc9%2FZXuNK7tezTTAbyj5198voNZZcMhEjGSeYnqcV4nezedXO43JIxlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6a8a11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111962,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1120 x 1000, 8-bit colormap, non-interlaced","md5":"eff2b46b6a4b334f8f2cd5b0d9365505","sha1":"a049a718d9edc41343f5c19aad3c6528605bfeff","sha256":"f80d45a6ed7308cb823465b55a715f095d58c9024f853ccbc4c82c3aa68e5fc4","sha512":"aa7a9b6ba35bec880b40295ac29bb3adab5d585ac2e4cdc840b1e26685f0961b2b652210d585bc8c189e35c41f08c6cae32c6a04b1c7817cf8abcdfab9204bad","ssdeep":"3072:LW87QsZwkndz+bLul1pxV1hccY9aBBwt2IDDSQBlq7:LW87QsZHY3Yrsp4BBIl3SQBlq7","tlshash":"b1b31265eedb3872c3c5e8dca5188c0ac18cbf992c0739b9c4cd0e579b969cd8db5812","first_seen":"2026-01-11T06:33:03.050295Z","last_seen":"2026-01-11T06:34:42.357967Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":843,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/uploads/20221106/9eb539141888680fff6af0fd28192cb6.png","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:44.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"GET /uploads/20221106/9eb539141888680fff6af0fd28192cb6.png HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 2691\r\nlast-modified: Thu, 07 Mar 2024 00:48:26 GMT\r\netag: \"65e90eda-a83\"\r\nexpires: Tue, 10 Feb 2026 06:32:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-12T03:05:51.865675Z","times_seen":25911,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/api/index/get_coin_increase?lang=en-us","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:53.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"POST /api/index/get_coin_increase?lang=en-us HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 6\r\nOrigin: https://keplr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"type=3"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: think_var=en-us; path=/\r\naccess-control-allow-origin: https://keplr.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13216,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"151ee10704ffc054b3869c8f578e443f","sha1":"573a7b2ed9078f7e4451a6e5b99487c8e627010b","sha256":"db9564d0b9077fb34fcfaadf64ca87a789e73848efcd53e751b7d1bbf82425b6","sha512":"09cfbae6e132dbd48149260134eb2122346a0422224f609a6d37f7de0c7f1d4a5bb8cd6c911b7b94cbf1438ef4f7b550d5327b19fef6700ccc0feaea70564b65","ssdeep":"96:Q82ok38/6mA3v+UG/lMlf1YE8DRG0fIDE/DHq8QhQUy565L75nXfcWyyqyBgjx6M:2CX3lXUa65l0SgI2QHw91","tlshash":"7752ff5b779cb86fa3709ac999d3341a700d325b6ed74b05e2d9cdb81058b1f234ba23","first_seen":"2026-01-11T06:33:12.930511Z","last_seen":"2026-01-11T06:33:12.930511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/uploads/20221106/557acf9c71076bd3ee61785be07a98d6.png","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:44.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"GET /uploads/20221106/557acf9c71076bd3ee61785be07a98d6.png HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 11415\r\nlast-modified: Fri, 14 Nov 2025 13:05:20 GMT\r\netag: \"69172910-2c97\"\r\nexpires: Tue, 10 Feb 2026 06:32:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"fb2836224f3043c70df8b44a4b1e45ad","sha1":"d5b89434636cc1134e835e946e1660cabf5005b8","sha256":"d3cac74d17f8a3dc32f6062c1775df866993719eb8f8bdbb36f2bbe859857492","sha512":"bfb6790aeb62fa1a74f40f6491e9655c0446bfe3ff2a17ad0137a412fa902de6e8aa864e22ff24fe6e6c207b81b75fed471c2c81c8de073a6a9736a72f770f10","ssdeep":"192:DB1zRtzlPN0AADZivqA4j4Fn4E6sZbuz1JdtBTJgq/Uulhcv1ihg19ZkrvW:Dn1ynECA48Fn4xsVunoqcuycg18DW","tlshash":"7832aee321ae1e96f6169422035f08d692c3789013bae5e1483eda9c3e3b1938954cf7","first_seen":"2026-01-11T06:33:02.937891Z","last_seen":"2026-01-11T06:34:42.351339Z","times_seen":3,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/uploads/20221106/42a397a2de31bf1e4fc09fc62f3e606b.png","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:44.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"GET /uploads/20221106/42a397a2de31bf1e4fc09fc62f3e606b.png HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 2790\r\nlast-modified: Fri, 14 Nov 2025 14:02:20 GMT\r\netag: \"6917366c-ae6\"\r\nexpires: Tue, 10 Feb 2026 06:32:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2790,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"0855e8ae0f7d2015c3e114fb642302af","sha1":"de209ed5eeeedbce1b9dbc906e6f2f9d76fda2de","sha256":"c53832b5dd3ba7641a881d8167b8f8374eda01beb2546cbfd21a0468338bcfc8","sha512":"722412ed3e8ab9dace19f089a9729370773ccf536fd391acdaf6dd62d1ff949f343fbb0b3d4965d725d918fe4b60268307b0301e533ea294fd73094e64880860","ssdeep":"","tlshash":"ad514badd86c09e09423adb9f6249d00f0e28738cc3a640a5b990f27159ed5ecf69554","first_seen":"2025-12-24T21:25:30.751603Z","last_seen":"2026-01-11T06:34:42.354246Z","times_seen":4,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/api/index/get_hot_coin?lang=en-us","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:58.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"POST /api/index/get_hot_coin?lang=en-us HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\nOrigin: https://keplr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: think_var=en-us; path=/\r\naccess-control-allow-origin: https://keplr.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":436,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d50f11bda32de6c0aac55cf45d25e814","sha1":"63ad55b577ea423e1e4fd248247c34ee9751b069","sha256":"f9ad8a67aacfae0c193c9cd52f9f1f3efe348132217027529fb596da621496ed","sha512":"b821f228b11935d9f92f26d0952cc12ed87f0c1e54a3a44034a57cfca20fca89ffe461f055cd01d2ff66d71c4968aacebc5fcc3204c333a312fbacbb49b8bad6","ssdeep":"","tlshash":"7ce02b5a5b2dafce3160b4825bdb784e1158342e35cf5b85d294dd7c0518a6d201b626","first_seen":"2026-01-11T06:33:12.934672Z","last_seen":"2026-01-11T06:33:12.934672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/uploads/20221106/da5a569fd5d8154c02facf8af8eae58a.png","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:44.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"GET /uploads/20221106/da5a569fd5d8154c02facf8af8eae58a.png HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 6355\r\nlast-modified: Fri, 14 Nov 2025 14:11:28 GMT\r\netag: \"69173890-18d3\"\r\nexpires: Tue, 10 Feb 2026 06:32:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"d4a3058ed8dc13c5ca001eb1766e5beb","sha1":"21806254a5fae65d0a2c40501db7c91e997ff6a3","sha256":"bbc90e2017afe8ecbfbd6798ab9adab559fb69c157880e4af54de3968b2a90a3","sha512":"fc0dce17bd289bd9f58a656834683bc2d33b3916d17f8389024c4fc9070a7227f7f0462b842baf369cb3c0f6008983d856dd1db65f4dce853794595bec5cf143","ssdeep":"192:sgEb44euKOfRfdKPrg4iisMnJBPjH6Zn6u22JR:sgEbeuKcRfA04iisMnLbG6Z4R","tlshash":"85d1c056b2f399ed812774a639d7857e34401f0442e4f52c9377bda5780a61e2cf80e3","first_seen":"2025-12-24T21:25:30.718335Z","last_seen":"2026-01-11T06:34:42.34649Z","times_seen":4,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/index.ed4a2d2b.css","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:39.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/index.ed4a2d2b.css HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69581828-1794e\"\r\nexpires: Sun, 11 Jan 2026 18:32:40 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QQPRaUSfFPWLWrjC3F7Mb0MJYdITWUxGQFZ5gEvPXvbWM%2BaFyKdy6QGGs%2Bd60gCzGItZwfqbFewamTO0EG09Zl%2B4%2B14VdrzsQ%3D%3D\"}]}\r\ncf-ray: 9bc260d19f4e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d2c05a28c7f2113821d909b7b5b918a3","sha1":"ccac94311f6ac6f580b64f47f7705318f1d226a3","sha256":"695bdbeea38a126c139158967cdd4f3a435e9936b9dff5b002e5f20a10fc7907","sha512":"3b96fbd1a89be8ae0b7479705cd4a2958ffe7f2f3f57ec23f407ad51ed8b447b9960728d77502e8fd8b2b19bf0971682030117559df250ea11c9bc1802364c3c","ssdeep":"1536:qlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:hApuK7hmVrS1Wu3iG41nrPI","tlshash":"4493f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-10-16T12:28:28.877032Z","last_seen":"2026-08-12T04:53:44.69443Z","times_seen":1816,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"socket.keplrvip.vip:17878/","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":17878,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:42.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Nov 2025 13:52:32 GMT","end":"Fri, 13 Feb 2026 13:52:31 GMT"},"fingerprint":{"sha1":"22:46:91:E6:07:42:B0:48:E0:3F:48:EB:32:C4:EE:55:3B:27:6F:0E","sha256":"CB:0B:A7:0E:58:EE:34:EE:3F:2C:18:26:EF:04:CA:A4:39:EB:99:34:1C:3A:CE:EA:BE:84:BB:6F:F8:85:B6:3F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: socket.keplrvip.vip:17878\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://keplr.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: KH9WgHLkwmgThzNzNXnO5A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: lsf63O1Yr5hmYLVcrfkHxuDrFvk=\r\nServer: workerman/4.0.18\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T06:40:39.05877Z","times_seen":17850651,"resource_available":true,"data":null}},"time_used":1051,"timings":{"blocked":0,"dns":1,"connect":259,"send":0,"wait":261,"receive":0,"ssl":529},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/item6.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/item6.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1024431\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-fa1af\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxJr%2FvgbV0Ev9b68PHSa6nWH3zr%2BuPGuyvSdQ9u2%2BkgMEKL0MYlzZlZmwqhcIJHfT8oRI%2BXdY%2Fj3mMwEt3K1%2Fas4Kz%2BYXYQbSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6c8a81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1024431,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1120 x 1000, 8-bit/color RGBA, non-interlaced","md5":"147088565706bd6210ed766f6cfccfe8","sha1":"20880fce872b52d5dd95203f4d821a1361707ec2","sha256":"dbc5948cbf5f1aad78096637661a0a157ff208b0d894bbd2c901233aa0ba549d","sha512":"d784a01f74b49aa9c27c6a720811ecd0facb1aed1cee6b18a5cd91ab7089d681f6fde2bc53f32e9ad32545ec083bc375fbec0b2f0ea5ee0fc0a8c4a2eefb8dc3","ssdeep":"24576:5UtUxzeB1jRqYUaKvgalvVQa2UMnmy4XkMyoAf4ZITRc1JHvMH3b56M43:OKzKP6ailvVQPUMmyakAs4qcvEH3t6V","tlshash":"f62533a75630ec38d4933637847c1badfb678f7254c853f28451720fc84adad876aaa0","first_seen":"2025-12-24T21:25:30.711023Z","last_seen":"2026-01-11T06:34:42.366397Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":1599,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/api/index/get_coin_increase?lang=en-us","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:48.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"POST /api/index/get_coin_increase?lang=en-us HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 6\r\nOrigin: https://keplr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"type=3"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: think_var=en-us; path=/\r\naccess-control-allow-origin: https://keplr.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13216,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa7eab2c20d00371e09a6fbd5096fc8c","sha1":"779070abca09954c7c9685d546c6c839aea957a4","sha256":"5b1a44e882bf619e9abd1ce2b599d0477c7be398a6851ff8e497c472097c8ca4","sha512":"965a999ee74052226cce1ef41c146b79a74b576e81fcb6d8fb7e5643d601aed42ec056c69e2d4c08c88cce73707996e93feb7cd89129df4dd718baac6726d78e","ssdeep":"96:Qw2Xks8/kpAgvAWhGAlMlfXnEmYDRGyfgDE/DHq8QhQryrL65awnXscWyeqyXpau:bDsISZ9Xr+L6TXmrkPHw91","tlshash":"7752ef5b779cb86fa3749ac599d3342a700d325b6ec74b05e2d9cdb81058b1f234ba23","first_seen":"2026-01-11T06:33:12.938898Z","last_seen":"2026-01-11T06:33:12.938898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/js/chunk-vendors.c8fd9668.js","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:39.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/js/chunk-vendors.c8fd9668.js HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69581828-1bdca7\"\r\nexpires: Sun, 11 Jan 2026 18:32:40 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3NlNLnpap65kad6fmgcAeHjyDEpwR7tcd8gb%2Fb3Azv3IoipMyNvoXS%2B2DgEpyxQlvtg%2BN1arPdd57OvSEb0mTUtRT%2Bfwj0vzCg%3D%3D\"}]}\r\ncf-ray: 9bc260d19f4f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1825959,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57781)","md5":"27bfb76e076553332e36f1a4cb5d7873","sha1":"199969e8639bb228f40dc735190eb59b5aa91847","sha256":"66fffcdcf50085e91856868a99f20c7aa051c488aa9c6c75c0b30fb3d5c6fcef","sha512":"a14e371053ca1adbbe2179a424c546ca5d20213859ced99e569a96495733707024d913f33d8e8ca821d2575c567459f407fdaef56ed00a0916e23a971dc604b6","ssdeep":"6144:xr71DPQjQBn0JVV3WE9SszsMNEGeJ5lp7Whfaa7nvmHh3UjdgR65tDI7tlHnG9/P:7E+0JaEAsweI5HwSxUl5u7tlHnG9/zD","tlshash":"6525198d72c5f0a647e371b1103f210bb33b29a8a8098498f675d4d9ad7994d632bf7c","first_seen":"2026-01-11T06:33:03.042016Z","last_seen":"2026-01-11T06:33:12.940294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":1393,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/js/pages-my-components-market_list.cf63a260.js","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:42.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/js/pages-my-components-market_list.cf63a260.js HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69581828-7730\"\r\nexpires: Sun, 11 Jan 2026 18:32:42 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oH%2BZa4FTBpclvf0A0B6vu9Gx9cFDWwmG%2BPGWyhZNBGNEdx5lY3eCd66NNSrVp7tT%2BY92tGVUlSW3C2MlfFQfRXusMOqzMYo1XA%3D%3D\"}]}\r\ncf-ray: 9bc260dfe81c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30404), with no line terminators","md5":"ad64d38ff3632fb1cf0ce886c0e9a151","sha1":"aaa6f22459bafe5c89dfc7ad10b8cc1397f8ddfc","sha256":"bdb9730c52d4a1b411a3c97e9fc571ed7bc43bdffadf868fd1a02d65a780519d","sha512":"6fc29296322fa832259d54a192939fc3715826976a1ad15beabbc2280b65c89fee0dd7d123b42be3c0315fcd8ee7a1fb02a06f25333a8f5f119d21b5b61921f9","ssdeep":"384:jw62J/Ccr9ynWPg7LiCSLxRjOAb4Abb9Ui259yhAun9C6It:s6ACcr9ynWPgf8xBXF9i","tlshash":"70d26614389be19f8c1f9461703e2e2561315fb29720d84db77be9e54bc4cc63a2a7ac","first_seen":"2026-01-11T06:33:02.935122Z","last_seen":"2026-01-11T06:33:12.941416Z","times_seen":2,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/api/index/get_hot_coin?lang=en-us","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:48.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"POST /api/index/get_hot_coin?lang=en-us HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\nOrigin: https://keplr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: think_var=en-us; path=/\r\naccess-control-allow-origin: https://keplr.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":436,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"97f40b95b62d072b5146c4bf05c4e06b","sha1":"01b367be9c116e27c1422bf179b492bcf0a9fff6","sha256":"4f596fb1b8d000e3513ce759e2cced967d6952a76a872fae8f7b98137a5fc10b","sha512":"8ae92689f3aff12665b4e537707bdb693aa4fdd9f4693286d2b010c2949df590c8231854245f70dbab3b11c29e22d724c002e9a793ae43925e87b749597c1843","ssdeep":"","tlshash":"b7e02b9a5b2dafce3160b4825b9a784e1158342e35cf5b85d294dd7c0518a6d201b626","first_seen":"2026-01-11T06:33:12.942406Z","last_seen":"2026-01-11T06:33:12.942406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/js/pages-index-index.3e277664.js","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:42.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/js/pages-index-index.3e277664.js HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69581828-18c9a\"\r\nexpires: Sun, 11 Jan 2026 18:32:42 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qPZ2vtaV4vVtLAozfawAH1SBh%2Fg5Zqamug2P4CiLz1HGZCGOSubfRuD7ntgQZG1PiZIrAWhmwx8iV%2B0F9TUPoTIe917HPOMngg%3D%3D\"}]}\r\ncf-ray: 9bc260dfe81e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63912), with no line terminators","md5":"114bedc71f3b2a09fcd167adaf17375e","sha1":"351f4821b97e09b2c4a11902517fe8428e63c136","sha256":"d1d6c3b109a01a2d088fb72526304dc8024bcf0f8553598e5904fe08517b52d6","sha512":"fcf419b538879ff9f5e7838d804d32ea06f54973c97602f824af72d51720ba0fa97766ec9c432e6584e1e7478ec4d3b251626d841321b50a72af3e0867d3a1fd","ssdeep":"1536:+XR2xssEsYId0FHoMqu7NdEAaM2OhFRDHysj4CZrDux:8Rsp0NVr7fnaMqsj4CZq","tlshash":"1da32991b10e58ee2f6bc8866205171db471bf31c524bc58f37b955c0ef2aca2758bac","first_seen":"2026-01-11T06:33:03.046715Z","last_seen":"2026-01-11T06:33:12.943864Z","times_seen":2,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/uploads/20221106/2170d4659639b5842cff0bf0be4f1715.png","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:44.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"GET /uploads/20221106/2170d4659639b5842cff0bf0be4f1715.png HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 2780\r\nlast-modified: Thu, 07 Mar 2024 00:50:54 GMT\r\netag: \"65e90f6e-adc\"\r\nexpires: Tue, 10 Feb 2026 06:32:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-12T03:05:51.851376Z","times_seen":23221,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/api/index/get_hot_coin?lang=en-us","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:53.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"POST /api/index/get_hot_coin?lang=en-us HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\nOrigin: https://keplr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: think_var=en-us; path=/\r\naccess-control-allow-origin: https://keplr.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":436,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eadc118dd82685eec6adf501a1cff91c","sha1":"cc72e44ffffaf08ea4d349ca7b82e30171430bcb","sha256":"deaab9303276f32794ec9bad004822fe94bcb73ababd456119a6e63fb9457ba7","sha512":"3b033699cc93569c6dc284fca4c088ecb30795303ba56a580be35b648c0077f2ad935a41cf4226ed78e2a8ab381272168239ef407ddb077bb161f189fe254b52","ssdeep":"","tlshash":"bde02b5a5b2dafce3160b4825bdb784e1158341e35cf5b85d294dd7c0518a6d201b626","first_seen":"2026-01-11T06:33:12.945634Z","last_seen":"2026-01-11T06:33:12.945634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/api/index/get_coin_increase?lang=en-us","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"POST /api/index/get_coin_increase?lang=en-us HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 6\r\nOrigin: https://keplr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"type=3"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: think_var=en-us; path=/\r\naccess-control-allow-origin: https://keplr.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13216,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f36e74c8183c8fd7575e8d4ff8e58c2d","sha1":"ca2d0625a05c57541246cf06df2f3f42069f744c","sha256":"ce0273a97642e4bc72ed3e7ff7a7c5cc8e559634617d78fbc8f79fd914a9f730","sha512":"ce6eb9ae8536ab824c5b07be0a5d6426dce57d3b4a2732197e84f706a2bb70d24bbbeba69a88474211d27f55aae86772c100ea9b92947b45da62b6134b905f73","ssdeep":"96:QB2YkZ8/kyZvXGkoPMlfXnE3DeC+fqJE/DHqRQwQFyPu5LG5nXTcWycqyXpagjaW:d4NHo+Fgu5GgErzJwHw91","tlshash":"1552fe5b779cb86fa3709ac599d3342a700d325b6ec74b05e2d9cdb81058b1f234ba23","first_seen":"2026-01-11T06:33:12.947068Z","last_seen":"2026-01-11T06:33:12.947068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1466,"timings":{"blocked":506,"dns":1,"connect":247,"send":0,"wait":451,"receive":0,"ssl":257},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/item2.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/item2.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 142996\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-22e94\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ePx9rjSerQWMiRtUX0PKinWm2yXDTvkcMq2xxoT4iLG3Tqi44DAP%2Bm8PpSsAoEUaOcW159gLY7P2Ksti9Dhj43FtZgz%2BlaoO7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6a8a21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142996,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1120 x 1000, 8-bit colormap, non-interlaced","md5":"1f02a4975dcb33146340504627b17f8d","sha1":"0067f91d1a64df68c740bf922c81efc7cdf5a4ed","sha256":"10bbb77efac8039920227948f4c7f737e805753be95ffc2d82daad5040e32573","sha512":"c8871b3e7faf0f95d9f3f896eed13b27bae445315c027e2c79d1c5058c9b73310c90e78956ccbc882a93ec5ce3417174b92ca60ccf3b2502dfee292b1a8970ba","ssdeep":"3072:xFVx85Q0vgvRVACykMlfNQkva0J4QslRP4+TOgoE3osXo:J4cvRKDlQObJP7gDYs4","tlshash":"9dd32344d89c66bf6df48c3d9e4081e477255ce6a4b65ca8fe02b83b88954f93271f23","first_seen":"2026-01-11T06:33:02.906713Z","last_seen":"2026-01-11T06:34:42.37887Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":814,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/item3.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/item3.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 184656\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-2d150\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JE7kAcAf6uLkls9fCv3SvErF7e2pouvwWdlWUvyie92SEga5KZp4699Bg0srir%2F7X0IlSTsZcBbNlPjTHkpazWa43X3HZCey4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6b8a41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184656,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1120 x 1000, 8-bit colormap, non-interlaced","md5":"e5bcbbd2bec6884d781fd04e2fbc601e","sha1":"d3a9eb722624811c3595a932b29fe3e48c9fd0f7","sha256":"b0c31797b1c38fdc059427b2b0b9be123cefb0cd23ab5869d3f86b6003189c79","sha512":"bf3ea0e67c504eb5c231bbb50e81ac85e3b6ac1955a51c09b131d23d6637036f184ca13d4cf8740dbc4b58cb5c007c11ce0705a5edbfcfb45e151811c8bd13ea","ssdeep":"3072:bCusxKl8opSn49i3neCGWkppn7TO3ZoWfpD07JvtsV4KgEyAugr7Ene:bCuMGynXGdpp7apsiV4IOq7Ene","tlshash":"1c0412673304f1f59dbf8c342021add6bdc14a6e3bf4ea4262b4f9644eb0d61ab1b419","first_seen":"2026-01-11T06:33:02.990665Z","last_seen":"2026-01-11T06:34:42.374858Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":817,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/uploads/20221106/4a85e4318a0d3f30ab4a7f0f6057ebbb.png","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:44.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"GET /uploads/20221106/4a85e4318a0d3f30ab4a7f0f6057ebbb.png HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 6640\r\nlast-modified: Fri, 14 Nov 2025 15:29:08 GMT\r\netag: \"69174ac4-19f0\"\r\nexpires: Tue, 10 Feb 2026 06:32:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"a76baedcd3611b36c6a6c328f37bab34","sha1":"779c02fb1fc7a8628075e95104f4f685b1dac12b","sha256":"bd1d815f05ac7ec6ee92855d8bc88c858874767b4e3a59aed6b41c823473584b","sha512":"830b1c3ba8defcbc853cbe3d3ed7eedb164d3d20140a603d384838bc9cf68e501290b7d66eb53625c7281c889a4cdf68e77560419384cb62438b6eb0ebe2bb03","ssdeep":"192:XTUMsqvmlSyDiVzogh5L6I+T5ddMVRyViGQv:Xbv9yDXCWI+FoXynQv","tlshash":"80d1be08878a2cac25eabf0913a9ca4153b9118796de03ccf8377175f1d9f654b8a0b7","first_seen":"2025-12-24T21:25:30.697929Z","last_seen":"2026-01-11T06:34:42.360889Z","times_seen":4,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/uploads/20221106/3be4db81cdcd7720ae8575f087a9dd9b.png","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:44.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"GET /uploads/20221106/3be4db81cdcd7720ae8575f087a9dd9b.png HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 3243\r\nlast-modified: Fri, 14 Nov 2025 09:24:21 GMT\r\netag: \"6916f545-cab\"\r\nexpires: Tue, 10 Feb 2026 06:32:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"c2f20802cc457f7a9068e6807ffcb35d","sha1":"b5cc6d5cc982d487c69d859501745e7c1321e35a","sha256":"73e257de8482c3e4244b934b1659dc747db128ffc6e97618748bf05bd5b9b834","sha512":"00505b2af44e3d7e502c471726c7d83957ad451bcd6d00030c82ebd36210d0aff7b99c79f51f26d7bc8af9467b5117ae9c0fcee6fa30584d5d5d31877ef1096f","ssdeep":"","tlshash":"d9615c61c3014b5ce118b9b28a5b263a5c0a9cfbd91c6f31da4aa13b3f101e32e9d715","first_seen":"2023-08-13T05:27:55Z","last_seen":"2026-08-09T02:26:45.942151Z","times_seen":1136,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/uploads/20221106/e334b1bbebc3062cc259b2c4622ecc8c.png","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:44.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"GET /uploads/20221106/e334b1bbebc3062cc259b2c4622ecc8c.png HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 5262\r\nlast-modified: Fri, 14 Nov 2025 13:24:06 GMT\r\netag: \"69172d76-148e\"\r\nexpires: Tue, 10 Feb 2026 06:32:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5262,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"d2e683c3ea2833bb1f5926be9352c0db","sha1":"6ebdefdb7a33e84b22e64ffc4b641df9e56e5578","sha256":"f755eb7408bd1ecd848a0c5ec82f743ce31a79856de895b5b5aac50d1743a76a","sha512":"691cad070fe7df3681a8f0d0a307de93ac2c7303cd38afb4b381f807c72273d810212a6be94f4b9961a3a5629e75dac33097bfcba7e7f2c0c50bea820a88be1f","ssdeep":"96:FDqC2bhEnh6UAyF4mKHsT/49BNgLqC4NGfH4Cq6jaJeGyvPnQ8:Zel9HvexQLJyvPnv","tlshash":"aab17ddc9e069faa798f01bca8b6eea1de35a407f7e082ad6801123659333021f58750","first_seen":"2026-01-11T06:33:02.940939Z","last_seen":"2026-01-11T06:34:42.375872Z","times_seen":3,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/favicon.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:42.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/favicon.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 7630\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=6,i=?0\r\netag: \"69581828-1dce\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODDpzhbOfZQ0fguSYw3l6TH0Hu%2FPBAES4YTNkGBxkZoXy2Mmb5h9bFO4sPUGDzzV%2B4y%2F7uhFiYERYDvNCV6fOXlp%2Bq8Dag%2FzWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e428791525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"61e8250223c835f67d0e6dd80e109045","sha1":"bf0dac2d7575f6543a865d28bdb82cb541bbfca1","sha256":"54bc67622c51da5f077d2be42831c9f7c6b54b3e992276e84f3c9e1be11538fc","sha512":"d6480148d1d1a503c6493146b698cf17af8eea555a76273af76aaed5bd8e2b2ef96273186014887f82e3eb679e0e77e1ea7a425eaa4ae45c8c336723dfc9be11","ssdeep":"192:9b73HqR/CvuaJLL+alkUkbwZYfkQppWadZeFqr1NiQfEa9:9bGFMKikbwZYPWIiQca9","tlshash":"9ef1af755c254c1a09605a589a873eb1dd27af034ee1e50edd9239b8e081cc6f2875ed","first_seen":"2026-01-11T06:33:02.942169Z","last_seen":"2026-01-11T06:33:12.953561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":567,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/w4.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/w4.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 7103\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-1bbf\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CSZaKbMmuTArMbwUTjPX9HkfS3y%2Bg3KmbDS7qK83WwKduSysNXhrktpVzCZVC%2BnNFRovkQDpHpKTHoN02lbor5UpwhD50s7ovA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e698a01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 484 x 156, 8-bit/color RGBA, non-interlaced","md5":"918bd20e9e58cc2c956ed43534632a73","sha1":"a87eee3d649156b00d80d69031b9f64858421904","sha256":"30c9716951175e273ac7abb45635d707655e1b840c8dcfbedfd987541be1db9d","sha512":"37b541377f02efc4573d3d98c9fa01636642ffa89e4af8d267ae2c78ae09ef2c0f26b98e8ec02e82fcc0e95fac80d21270f0732aca963b15426a2c661c1f5766","ssdeep":"192:vSy17kAGDbUK/cRpK3HqN1357+dWM+tK8+yZrwX2LO/Z6:a8HPJzK3YFcgrt7WX2K/M","tlshash":"89e1afea0f67dc1136b540672a4b4a2210b6c09adeccf314e17c21cf667578a22943a7","first_seen":"2026-01-11T06:33:02.93658Z","last_seen":"2026-01-11T06:34:42.359391Z","times_seen":3,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/15124.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/15124.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1719\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-6b7\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AnSARYHtw8bDdF2Eskug0d3Er6SI8ZYuSwN1Qi5VPwPEhDS%2FnIdylDvNxAA%2FftY7gk5W8US4tjk9WV%2BlUXVcnRWQYO8lyKNz3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6c8aa1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"1fd9579d7a0b99194e8571e0e6dbf687","sha1":"706c4fcd17a7dde27ff06f30c80c76bc6a43f226","sha256":"0995030b2600e4771f980761ab93106f7db0535b793db39859f574369a604511","sha512":"43de67290376f451b9e7d87533a76ca1bbe2c5b9584a0ddc558720a744799c685d574d58f61212c1faa877d18be7ede16ea1ed509d5500f2f5eee2068f6a4aaf","ssdeep":"","tlshash":"e9310b277cc9e6293f27ea3257679f0d703b19605913bbf4a8a4540a06a1acd0c4dd81","first_seen":"2025-07-06T21:54:47.526468Z","last_seen":"2026-05-02T18:46:19.784611Z","times_seen":13,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/assets/element-icons.535877f5.woff","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /assets/element-icons.535877f5.woff HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-6e28\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gSilhqjp12hJS42v1cM9%2BMwYO8IjWmrPDC3pu8D3ZNNJJ7lXeBgmn0BdqPHVoWnvh7V6JMs07jA7h09DTrGkyY69%2Bj0zHafXPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e668981525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-08-12T05:09:18.27424Z","times_seen":29406,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/uploads/20221106/5b334524c37271407ff9dc3a4b9033d7.png","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:44.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"GET /uploads/20221106/5b334524c37271407ff9dc3a4b9033d7.png HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 20202\r\nlast-modified: Fri, 14 Nov 2025 09:51:20 GMT\r\netag: \"6916fb98-4eea\"\r\nexpires: Tue, 10 Feb 2026 06:32:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"009af3ea7ee02c60f32d92fe5ca8379d","sha1":"5c6c7b4fdc2c4e605e83fa8cbc3eb33b1ffd8d38","sha256":"b7486de89bd2f9801cbc036affac8af0b1e578071baa1786dc833132abef2bcf","sha512":"5fdafb64d42e60e1ed272ddf44c5b759e57f21da2358c086b07a3679e270b95fe89150feb0f3c8606dfd4f766a6aeb2fcbf79c82d8df75e57e0660c143c146ff","ssdeep":"384:YTBILlAQRtoJaTC+SUc52T0aIqJKHQPnsAhipC+6pMVl2jhEKGCxI:YTB4l/RKJavSUk2iuKOthgCji8WaI","tlshash":"c192d1f32aca4e4086b6237f8f3717851af29e065e551504e81b7aa82e4bccd56c0a3d","first_seen":"2025-12-24T21:25:30.726368Z","last_seen":"2026-01-11T06:34:42.371993Z","times_seen":4,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/footer-logo.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/footer-logo.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 39977\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-9c29\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FSqc360o9%2FADPlv73rYxk1WrmLGQYy%2FwYQadR95wQuQ9mjIwNMfeKLF1VEWj6lCwkDF%2BC3X2DyQDrJNUcegJu3sVwGugvvHNsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e718b31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 474 x 315, 8-bit/color RGBA, non-interlaced","md5":"7f95d9ba0b2a2dd802ece36aa72eeb22","sha1":"a4f273e09d5bd8373b0ce83a6aed2a1593713f1b","sha256":"571a9e96a5d145b72fc6062b60a0cf3ee9a750fcbafbc45b120e2ed2c590c7ca","sha512":"cb0e07ac5d21819506221dca2d59efae444aecf078af1b571f09bf32f09b06f14c9bf70ddbcbd6ed50606bfadd6b0a38011381274ad5ce1ee4db44ae479f1b5a","ssdeep":"768:hLNp00UDg1d4FMKAvz2D+8ahNk/rvbwJQhIZ9uowHzjc6pK732a+3:hn00/d4FMHaD+8z3IwHTkE3","tlshash":"f203f1af351fe006ca475ac8e2b9f15d08e1e4d9ad0a3dac92cec5893b054f71db056d","first_seen":"2026-01-11T06:33:02.924452Z","last_seen":"2026-01-11T06:34:42.360414Z","times_seen":3,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/api/index/get_coin_increase?lang=en-us","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:58.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"POST /api/index/get_coin_increase?lang=en-us HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 6\r\nOrigin: https://keplr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"type=3"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: think_var=en-us; path=/\r\naccess-control-allow-origin: https://keplr.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13216,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b0192b9ed43e4cd68b824c495e162d81","sha1":"ad51d71cbbe36463e016034ad389ea0acfe8db42","sha256":"6d495229d2e76eff42dedc97254c82444b7b7368e2e3bd27236c54aa651553af","sha512":"da52134a152f222c72c75ed91a2865564bdc327d95c60ff7321705799ac429bdefe9df106cd06bca760d8ce6ed9ba092d4b6009c5fea299023708eca10ced444","ssdeep":"96:QHNs9kt+i/UpAvv9G/lLlfF5EeDvcfrDE/DHqxQwQuyYJ5KgnXfcWydqyBgjx6Ey:g4kPn+uXJ/0zgI2XHw91","tlshash":"5352ff5b779cb86fa3709ac999d3341a700d325b6ed74b05e2d9cdb81058b1f234ba23","first_seen":"2026-01-11T06:33:12.960033Z","last_seen":"2026-01-11T06:33:12.960033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-11T06:32:38.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 06:32:39 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 02 Jan 2026 19:12:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FHXoTOKQ8b7hxed21%2FmWrAjmktGMHG%2FdDkvWRp%2BLj5zB0JGLPEkyAWwkPNkiFWbLfTNcFbl2VrfpAxCXjGFPAh4zDfVGiag%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bc260ccfb03569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":841,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (500)","md5":"9b9ebc5f62ef24eb55b8151fe57e8363","sha1":"fd2d3bafb23c115caf9b90e28c8435797d77bde3","sha256":"5bd04717af2b37dc40b12ea7ee2e862ed9b1c6eeb3b92764008834efddb49b37","sha512":"7aaf904fc8e69346a68ed17d400864f03715e965c79f84d8a77414cee7448a51dfe0024b4c99b86f024297a33fbdb8e332f94ac75eb1da8e1fd70616ad415446","ssdeep":"","tlshash":"dd01afc31c50e44d072086517577d52e869649b9ad909d607cd92afc8be0b8edf3f851","first_seen":"2026-01-11T06:33:02.920514Z","last_seen":"2026-01-11T06:33:12.961834Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":256,"dns":227,"connect":2,"send":0,"wait":566,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/computer.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/computer.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 313868\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-4ca0c\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHBEYnWkLsP24IjZq9JNSTQV%2BmxHkHTcZWiLW%2FyUBAl96W6JlKrNxfeM%2BfOw4zEuQc%2BYoAerEd3cxG7Jtr0v4%2Bn1gfi7TZVJ%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6989b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313868,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2540 x 1420, 8-bit colormap, non-interlaced","md5":"c0b1024a7523445488358588fadd808f","sha1":"a852965a44f852861cb5024c50ecf4e865201436","sha256":"1d72640097c99f929f76f7251299be6a7279775482ce8af71275b2035c40e26f","sha512":"d7364039df34e495510dc47fce61a9b180dbbed2bfde9de654d22604d43013fcfc43a8ca9901a5d0e913136efa76ddb339318b2aee674d30ee3bf56a6b3cfc67","ssdeep":"6144:UIHX7wx6069uDxtzqhrRHXVsK2d70cCjqnMS3t11mcrpYj56dDDHPay9m:r3g602uDxtzKRqdQxqMS373aj5IvPaT","tlshash":"146423fb61722d01f459cd1b7aa8447302dffb426b3cdaad274e281514cad8fb498d89","first_seen":"2026-01-11T06:33:02.966427Z","last_seen":"2026-01-11T06:34:42.362254Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":1060,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/down3@2x.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:44.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/down3@2x.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 805\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-325\"\r\nexpires: Tue, 10 Feb 2026 06:32:44 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3r2wVM47qEqwAy8geuzaxd6sD8PZyeRyQ1nceVrXHulQQ9LWkFLQz%2Fg2KWtKPOD3gXX2IQMfDEzHr7kq4x5V8CNPxY5ZwKaYXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260ec68f51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 17, 8-bit/color RGBA, non-interlaced","md5":"fd2ef04b4ad0d90530ba88fb7696f703","sha1":"2702944dab91b9f733f2d545948bdf29012d1c54","sha256":"ed63944d7effcb81d419d945068dd44c380e0a1cf667e8fbfb8816feed8cbbf0","sha512":"17f791f678bb74fadfccb69e41170790263187408c3249ebb6a34b29898576d0058ebb0af8415adf3f739ec3f5609c65338947cab13c22cd99403b3ef276384c","ssdeep":"","tlshash":"fa018198831b4b6abda7caf00085e2e43887ac344320a724ca04c699725ac1b43a2ec8","first_seen":"2025-07-06T21:54:47.476115Z","last_seen":"2026-05-02T18:46:19.793072Z","times_seen":12,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/item4.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/item4.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 212499\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-33e13\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rTUmu0w4mNIWHUInElxRz2eJOzBQzjp2rN%2BZGoHs0gWSkr6K960IfU2gjX1d%2FHbOBqGI9iAbN4vtS52%2BPtgH7FG5sudapkyw8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6b8a51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1120 x 1000, 8-bit colormap, non-interlaced","md5":"cc2b242609ba31a8cca1a147b34490ac","sha1":"7bf804e18882801a964d4eb9525246d101d06137","sha256":"d3603d2029c3a48058248e8f566357227671b156c59278bcc3be64a57252fcc5","sha512":"896897ce5ac6222306e1bfeb61f90570a0f90e0cc80d3f13a921ef404b2ec35f84139439e0ae17eb612e89495d06c52f2b8fe89418baf877a0397f1766ab4aee","ssdeep":"6144:/H8L/6lXlGczQvGBTvRYWLwUfoKxSpwupeYLn0+NlgPtH9M:EOVGqNVkSJ+wupe60clglH+","tlshash":"7e2422750307eb89f31232638c8c9dd72f4b4606ce9bc5b05fe55369bf488672a46267","first_seen":"2026-01-11T06:33:02.963718Z","last_seen":"2026-01-11T06:34:42.339456Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":807,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/js/pages-my-index.b2014987.js","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:42.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/js/pages-my-index.b2014987.js HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69581828-2c735\"\r\nexpires: Sun, 11 Jan 2026 18:32:42 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nq4TgVLv%2Bw%2FvvHM8L6D9Or6Z6EvNsV9E9Rk7eZUtjnUW9PZ3keMlA2WYoMFtOnC%2FkYGvT6Zyt2gnejnr0I4R2GA98811OTgOvg%3D%3D\"}]}\r\ncf-ray: 9bc260dfe81d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":182069,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64690), with no line terminators","md5":"97a2ae3936c6af6c28f3bda02f6ab025","sha1":"710ed10133d87e8a3dcd09ac2c2e90fa7d3a6ff3","sha256":"cc9105cb267b10ed68ba3100f8f246902af65eaf08e8c3c447b07689df3928f9","sha512":"4c26aa6e5038781dad9484adec23daeddc5e826c4406aba7d0a820f8dc7a3837d6a50fbbdeaa36109c7cc717c8b9a451b673c3d4b53178572015eb29f8156391","ssdeep":"1536:lmfvzaS2P7r8Lin3WtgZEIitBQp85bHH3EeWQQoFS3B7PSz0ZgaFZ9U:lmTy3yBQoTc3o70yam","tlshash":"6304760d7287e1af4c1f9461302f1f2491366eb59114d48ab778de954bc8cda3a3abbc","first_seen":"2026-01-11T06:33:03.045388Z","last_seen":"2026-01-11T06:33:12.966451Z","times_seen":2,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":272,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.220.203.60","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sun, 11 Jan 2026 15:32:44 GMT\r\ncache-control: max-age=32400\r\nset-cookie: __uni__uid=rBEQiWljRAxlvlw+A2WTAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-12T06:21:37.540885Z","times_seen":20204,"resource_available":false,"data":null}},"time_used":1564,"timings":{"blocked":504,"dns":1,"connect":245,"send":0,"wait":555,"receive":1,"ssl":255},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/js/pages-index-home.d8e63fd6.js","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:42.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/js/pages-index-home.d8e63fd6.js HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69581828-2fe1b\"\r\nexpires: Sun, 11 Jan 2026 18:32:42 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fuBPFWdgBmDT%2B9LiIpENN64ahppoL5oTL7gmNf6gWnOtGw1DLdgyw7SB2nAlNWwO0t6o6KkuxFtj9WgbaKaMvqDmLgUfb1cPQg%3D%3D\"}]}\r\ncf-ray: 9bc260dfe81f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196123,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64448), with no line terminators","md5":"de30d53ccfe94c085d8d004e588c1af1","sha1":"342c889f1d4c905efc26432f21e6355de2be7e15","sha256":"e3b532a0296d0eaee495b0984441867d2d08c20ceeb2d632d2c1c8bff96c8e2b","sha512":"733534448bb004a53f0f29bbb5523ec4b8a462bb6a1ecf5b78ecd43fc612ed14d0db1e95753616288308a27bac9a5fb50ffb75f129ac635b1cedad08cf266684","ssdeep":"1536:IW/CghT9RB4K6OWDZgs2zTHJRD2WGvrFjQRtAcqv/7acZ2cxWlSKmskj4kH/eg3x:xhfzKD/6THJRCbr+q0lYeq","tlshash":"d11495187183f1af8c4f9465302f1d25d0325eb1d614e44afbbeca954bd5cca3a26bac","first_seen":"2026-01-11T06:33:03.043674Z","last_seen":"2026-01-11T06:33:12.968966Z","times_seen":2,"resource_available":true,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/api/index/get_banner?lang=en-us","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"POST /api/index/get_banner?lang=en-us HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 7\r\nOrigin: https://keplr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":7,"data":"type=pc"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: think_var=en-us; path=/\r\naccess-control-allow-origin: https://keplr.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a97e94e98da06e07b30130a9ef162679","sha1":"1635567e01f71574ddfc9c071e82e6162221a304","sha256":"098642cef62f2dfe2fcdb7ff2affab6a93771f4a328dc0163108228b56beafc3","sha512":"d605ad09c42a678bac75aed8158f2535cd1236283900ec563246fbcede48ede0248bb51a914cbdb5e785bef406b0379f153bbffff8b8fc343b791bcea14ed55b","ssdeep":"","tlshash":"31c0c0f20c020c6773d7b0c01208001e99c7204fc5e89f02440ec918022c8dc7007c33","first_seen":"2026-01-11T06:33:12.970862Z","last_seen":"2026-01-11T06:33:12.970862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":470,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":257},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/w1.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/w1.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 12071\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-2f27\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zgyjBo6hWdHL%2BIKg%2FMsIG2j9saxFwHkzLA2439M6y2EjQYKch4P%2F4rOGnZ%2BbZmVKXUMSdibTAstEexUf6pOvP%2FHXB%2BFQI4CA%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6989c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12071,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 414 x 156, 8-bit/color RGBA, non-interlaced","md5":"ca6b8f95592f09e0b7cdc96f0dd4bd7f","sha1":"47279b8bb68a03af29686ccc9996e0673c7886cb","sha256":"4e07ea65e24e46a6c753186b9220d0f35dd7605b1b585bbd2cf064563d908378","sha512":"c3a7bd64134ff46139fd2f30810dadb51fd7c23126787e81c1ea20dfa6a6d617ce9a3fcd39b29b09b0d96e21dc9960cdb7d521396883861c15a27185c5bd956e","ssdeep":"192:TSn9lqP804DckZj3SY1Cc61gtFFl+I/bqdnE7ki60sWGilx8BgOlHJ7JvlyceRYm:GnWGjj1CckgtFD1qbi60scT8BHx5Jvlm","tlshash":"eb42c0fe06396084383f8621af7b94b8420c0254e4bd6df063f375faa5225d0d2558e6","first_seen":"2026-01-11T06:33:02.975903Z","last_seen":"2026-01-11T06:34:42.377342Z","times_seen":3,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/item5.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/item5.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 230022\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-38286\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFmqV0rP8JqcFtKdSaEw38qp%2BOd6YmQwRLwppU3ka%2F0WgaASY%2Bqj%2F%2BXYHUKxxC1DCh5LHMJCaahXapJ6dLPkPe8XE%2BE3ineljQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6c8a61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230022,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1120 x 1000, 8-bit colormap, non-interlaced","md5":"0eb3fc83f04d27342796dd7fe1e1876e","sha1":"8bce8762bf9b6522fb090c7775e01c3987db76de","sha256":"6dc162257ae71a5ccc1a3798f8c18be420fe598e487c53b501aced0d51413624","sha512":"e31a25b48f02b20956b53770777cb568043dd093eb1c6103e4cfab779f2930a5dbaeb7e51406b4481d05b3ecc522c1a885ea6736731c52c5e72653c16f20f8bf","ssdeep":"6144:uqeeTyJWbe2TCO91PA5ARBpbnPozasbHbaroHqEWI:uqiGeoPPsARB9nPnsbHbarmqEF","tlshash":"8a2423e2633c317be64622616e68e14cafd7204b35e8d32c9c4f763346ec49649bd974","first_seen":"2026-01-11T06:33:02.912194Z","last_seen":"2026-01-11T06:34:42.352917Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":1104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/14151a.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/14151a.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1595\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-63b\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BejKJgK8IakuXqdYQXallDvP6X1MRQK%2B6R%2BBMoUeNACNhmgdz7IKssIQSRyEC3hG%2BOMStYatEIWiye1W03S5iTUM3rKcf7QNrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6c8a91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1595,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"97215f8732cf0b1e6741d5ac8fd2aebf","sha1":"cc08d6a75794dd2a4f2530659e31dc85ecada05d","sha256":"fb94eb1246c407cd44078b4abb569172134f67759a48a203fca9fd660c0b84ff","sha512":"7768ed28e17cb9276ed5872a933de2a1d090d9322c50624698e4b296d3b42588b455484f3ee53f7c17b05291cdda85f7d7eb274cc4e0b6cd740b03ca6e4be255","ssdeep":"","tlshash":"0731e75bf523f1abcf731ceef8d2091e65459c2c23af51c87c45bf25b6d2405a552282","first_seen":"2025-07-06T21:54:47.555621Z","last_seen":"2026-05-02T18:46:19.801822Z","times_seen":13,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/1512.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/1512.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1658\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-67a\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z053OmKHap93k32GL1%2FqmdmEQ%2BKgnFlHzpdT0d1bIZCRLfgCcnJ1R14zTtTq35o%2BUPXC4m2hEllrrvqwaETs0W5Lz5bM%2FY2A5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6c8ab1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1658,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"fa1c177c1d404a30b94835df1e992299","sha1":"e28294ec52b6ee9633f5fbdb1084118e2709e579","sha256":"4589637d115f97e6ed29f7688786a8c030418bff631045a8ec35c22669ec2c4c","sha512":"81717a846ecb3026b7420da867befa1676d8d782f6136a9f378d9a7727aef89239cacfb83f699cbbf7b7fc49599350b3211337680ea3652eb0603bab6c167f98","ssdeep":"","tlshash":"b7310c9013a1b5b3dbb9cb7edcf514cff8a911956f463e9471574c220695102b134863","first_seen":"2025-07-06T21:54:47.465144Z","last_seen":"2026-05-02T18:46:19.768263Z","times_seen":13,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/go-top.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/go-top.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 3551\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-ddf\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5vNmmN6HFv9ICjlwyW%2FExj6znWa8Qx%2FjaiE5GtSPqUc0gcwPja57z8F%2BN2AftkIxFPHzmfoFN30NUH88IBt72rK0vokkpNhC%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e728b51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"3bd88c4646ec65bffc7109e34ba204ae","sha1":"4a815890b96dfe4c9f12b2c3641446c0165f6ee4","sha256":"0379757a587fe62255d96a061c5582fddd7500b1296d923fdd3d3af874f5c389","sha512":"7da8dbc23899b0461667eb50adc9e3242b8007be00cf63bf1ff4cadf250dfa9957bc38275d798bacdc66aa2ffde7f6335c56ce4404c494ee914dd75b848207d3","ssdeep":"","tlshash":"70718dc89741e36faf3e493025170c363a7e553813b6884e7d1b78234959fc0ab2ba83","first_seen":"2025-12-24T21:25:30.749523Z","last_seen":"2026-01-11T06:34:42.348562Z","times_seen":4,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/js/index.b16a3f82.js","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:39.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/js/index.b16a3f82.js HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69581828-a9a3a\"\r\nexpires: Sun, 11 Jan 2026 18:32:40 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FXcyj0%2B%2FGpjn8trGZlIA3Higpl7D3wRew35ESFWpCThb0Tp4sav7AWpiF%2FFl3dAAVz3cw0A4gio4sQ7J0PDQFmgYoPGEnZZNcg%3D%3D\"}]}\r\ncf-ray: 9bc260d19f501525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":694842,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64141), with no line terminators","md5":"7256ac5053433b29b5501b82a42706f0","sha1":"22d3128b6976cbb978bcf14a569332fa79464301","sha256":"b6e9f55fc4a9add3005261a68548aed65e3070648ae1fa5f38d4650c13819656","sha512":"e84a11f2196c69e6e525b13d7c4b87ddbf8cf1541c4db8a7da04db806e791657192f2077e7a668ca990ebe2cf07cf00cfee00b4a927a26c35c2d2244f64b3c88","ssdeep":"12288:M1oU1xlif48dK4LHYNBj2qYCTQZaJDwtosk7:4pDb7","tlshash":"26e4d752af953b3cc11f89b7d2c235e8f311cf22978ad6d7da45be27ca80699123512c","first_seen":"2026-01-11T06:33:12.976687Z","last_seen":"2026-01-11T06:33:12.976687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":1115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/phone.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/phone.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 217801\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-352c9\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oyf%2BjZFjHElQkZBHR%2BqUQxu9PBBpUUGAlRuTdUZIvYHbFtyndryr%2F4ZVWHg2C4mi%2F6gVnz1iXe4%2FvYOfB68rV0LL5h6bF0OHiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6989a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217801,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2540 x 1420, 8-bit/color RGBA, non-interlaced","md5":"14d6dac2cf1cffd6a52301ef81012f39","sha1":"70dfc14c0f8f873bd9221abdd707bc42ae353ead","sha256":"1bbfc9e186f7fa0dd869274106a140779b44677ba9fb762837893b68abc4345c","sha512":"a30edf4f930b9ba033287b685a5b8926ac5884886a820e595edcaf0750fd91c3e0b02cbb016c48bc72ce81deaa57362c0e56593b70ecf7166f1becb451e4e6b7","ssdeep":"3072:rfgMLw1trMSt8wtP7wE/hO+2lpto00P8CwWXwYqfej1z3WDnnLNkxuyuow7infyE:rfxwRt8ODwE/EbcRj7g3ifyvkHAS","tlshash":"ee2412e3e60bcfa4de0f20342a9629ed6de044156e4d88320635751fec4b5bde916bce","first_seen":"2026-01-11T06:33:02.922535Z","last_seen":"2026-01-11T06:34:42.365887Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":1114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/w2.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/w2.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 15363\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-3c03\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZrKFOjy%2BoW4RpSFL375u2gtBHp3fMKLZ2%2BDx16WTpvzi6Va53Lb%2FkBoRH7V7%2FimqWBuBkVQPnnDS9CIGWIc5NRTx2V6LCuTCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6989e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 376 x 192, 8-bit/color RGBA, non-interlaced","md5":"8925d857816a9d29206f1971fee53983","sha1":"2dd6232e2debf7f8ab45889f54ab1eacfa14bdae","sha256":"f9928ca6eca10ca86268f556894a8621ac1b1bb04558d5c0a860d85969d14b3c","sha512":"4a00d0cbf1119f7066762d042799f387bfb7fd46de48388ac65fcde1a1ac87f5afc6cb0848e1d7a8d0a387a59137c86f6609d839a349be4c4ea09ff00354e388","ssdeep":"384:yPtF4crubcGm9O0EWo7NctZUJt9iGQWqv9vcYxklqPJFS:W4zIAWo7Nct4Q5JxC8FS","tlshash":"1062d0821a964ac65dadccad023811f3cc8088fe571fe3d14d516d93ca0ff647b58053","first_seen":"2026-01-11T06:33:02.968457Z","last_seen":"2026-01-11T06:34:42.359902Z","times_seen":3,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":276,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/uploads/20221106/323acc4482fb1abc75e3268b778d2b5c.png","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:44.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"GET /uploads/20221106/323acc4482fb1abc75e3268b778d2b5c.png HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 2267\r\nlast-modified: Thu, 13 Nov 2025 22:59:29 GMT\r\netag: \"691662d1-8db\"\r\nexpires: Tue, 10 Feb 2026 06:32:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"553cfd99048f70a5e3e28f34f34d6ac3","sha1":"e460c60321f95f325e1fc4166b3709ef2820f222","sha256":"a0f7f3115f4148f8dae6f6d0489dce3693adee4d65c3f123f79174c502f0d5df","sha512":"feed68f6ce0d04f1f43784cbd26d1f3051826e7c2a4444e10194723f30b8d0fc17a28584637ca9b0c9691b9cb7a853c6a3191a1f54984fb8d22b235884a645db","ssdeep":"","tlshash":"b4414bd25c4dd59ff51218aef309876178fb2675b2cf92750b06c23d8f6042c0b4e808","first_seen":"2025-09-17T11:33:49.757526Z","last_seen":"2026-06-18T16:03:46.854957Z","times_seen":12,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/api/publics/website?lang=en-us","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"POST /api/publics/website?lang=en-us HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\nOrigin: https://keplr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: think_var=en-us; path=/\r\naccess-control-allow-origin: https://keplr.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":264,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"13b4f262ac9a6e5042a8c3c00ebfc784","sha1":"42be67adb74fc98d1b8f8b0539cf7cb90c25f43b","sha256":"26079646958f121ae04e0f9ecf4aa544221577bc9aa3e06c48be1ea545b0c065","sha512":"7a041d6a52d278a30d7cf088f6b67c356b3fa7a770c124e9d6cecda69fb4d47a3750a96b8f32f3f8e0f33f5b15ec89634759b82533f5525e8b5a0d6851350277","ssdeep":"","tlshash":"99d05eff2781a29c967842d502ce301d541621cfca21934c3e4e9ca3aa2496ea44703b","first_seen":"2026-01-11T06:33:12.980344Z","last_seen":"2026-01-11T06:33:12.980344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1537,"timings":{"blocked":566,"dns":5,"connect":262,"send":0,"wait":437,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/up3@2x.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:44.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/up3@2x.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 845\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-34d\"\r\nexpires: Tue, 10 Feb 2026 06:32:44 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kB5jOG3%2Fwd83QihXcbyArHQumJdq1ZAn%2BVtdDCrHDK0yjZhmAjKqCh2RlIO9VmPEga0jnBG4NT03SHXaRGT95c3C%2Ba1ZvcsvjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260ec68f41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":845,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 93 x 17, 8-bit/color RGBA, non-interlaced","md5":"52b8aaada2bfefde4966038542dd3354","sha1":"b424beaf5fe69e1307c4fe88c7bcb6748d663492","sha256":"fbc0e263168216562d48dd820f90aeba54802d660b5552ebaf3728b8696f7b4c","sha512":"41c32301c6a117e17e2d5202401489d587ba937ae5015129e84016f7753c7813e5386f2a5f0238c218b06dc6fe1da620c271520f0cc022a7bcef4b88264bf24a","ssdeep":"","tlshash":"b00152e715a8716bb80a1df512eb7155341e9c19421093bb82346222f0712cb286994e","first_seen":"2025-07-06T21:54:47.490027Z","last_seen":"2026-05-02T18:46:19.783418Z","times_seen":11,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/js/pages-my-components-order_list.17ffd33a.js","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:42.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/js/pages-my-components-order_list.17ffd33a.js HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69581828-74e2\"\r\nexpires: Sun, 11 Jan 2026 18:32:42 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kksa0ZvjkNiXol2g%2B%2FG1tX6284%2Bb2D79JHtjbWRnbZDpAgVPBdYwN6doW0Wx1bHlfhaVAc1x%2F0XnWdF3oPsx3lELpw078TnECw%3D%3D\"}]}\r\ncf-ray: 9bc260dfe81a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29922,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28808), with no line terminators","md5":"1de077c513c10dbb5a16032344d00220","sha1":"adba1558eb057179308654167bb16be70b71a087","sha256":"1e8ea1b8d63e64535724de8e2c1edda6d9859a8e6cf49af038561602aa2fa186","sha512":"2c41bc29e272a0524e020bdfbf23a2bd833ba1eb931d21fde5aa34487f03ac1628a225153ee29f787f41c20885eb813135ecd7b6565f1bbf53e1367a9b12c982","ssdeep":"384:jY2IyV2Afj3yWQ/iwHAr2rFhoExW+UT6Kp40rRdgKqr1URI:jYtPtWlr2xOExW+UTDp40rRdgKm1oI","tlshash":"cdd28514748be1af4c4f8061302f6e2591321eb1d610e989f77ad9f54bd4cca3a29bbc","first_seen":"2026-01-11T06:33:02.932923Z","last_seen":"2026-01-11T06:33:12.981966Z","times_seen":2,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/api/index/get_hot_coin?lang=en-us","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"POST /api/index/get_hot_coin?lang=en-us HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\nOrigin: https://keplr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: think_var=en-us; path=/\r\naccess-control-allow-origin: https://keplr.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":436,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84d46b1784a2e99f8339aa1c6cdebf07","sha1":"fe9a64806c472dd3f20b98bb66dfb7047cb9d7d3","sha256":"fa603fa28ca39ab4293930950510aa627b773a5fc575707c2fd7bea725451829","sha512":"a37dcae413151202c55c544a346bee0d020966e03dfdb7d5b4775e7182ed35050fa68b0d111a26dc53a995290ecf45fe693ad6bd0b00237b394142ef5e309d5d","ssdeep":"","tlshash":"05e02b9a5b2dafce3160b4825b9b784e1158341e35cf5b85d294dd7c0518a6d201b626","first_seen":"2026-01-11T06:33:12.982689Z","last_seen":"2026-01-11T06:33:12.982689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1559,"timings":{"blocked":554,"dns":1,"connect":273,"send":0,"wait":449,"receive":0,"ssl":276},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/logo.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/logo.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 4221\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-107d\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EH7hozJ6Ra96eZ5Qu1r4Bu%2BKa5T%2Bwb2Ogq5GSSDA33BxpRKM%2BDV%2BmvJZH7WP3KuRqgohZnbTREtE0EMoSVdet1ihdLOWgwlp2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e638951525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4221,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"36ac244e03701ccd14fa3cfed2475ee1","sha1":"7c7c792e4bd572da11911f272d43218da5a5a597","sha256":"f142f8e58e87d30dcfb0e056950ba46c866d96125d25e26a67f8871623d89b7a","sha512":"c51d98a531224ae07b2eb7d16fd7a34ce93a66454a81e1de585174e70a7b775d49b32f9a66ab635b06b9535ffce98902f42d92b489858ccc6fbb02ba2c0a6f88","ssdeep":"96:WSOOJdMmEMfmGxUZvpoHQNx8P8/j5KQFJL1Eieg:WSOOchM+TvpP7L/JRh7","tlshash":"78917fdf01658a7b1f4ae7fa42937958016e142f0fc55b0a74a5b4c34e71f05c3b7494","first_seen":"2026-01-11T06:33:02.949526Z","last_seen":"2026-01-11T06:34:42.375379Z","times_seen":3,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keplr.top/static/imgs/235.png","fqdn":"keplr.top","domain":"keplr.top","tld":"top"},"ip":{"addr":"172.67.136.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keplr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:53:39 GMT","end":"Thu, 09 Apr 2026 08:51:19 GMT"},"fingerprint":{"sha1":"B0:DA:3A:59:0A:7A:A7:B5:6B:89:82:C6:50:F0:DF:58:29:54:C8:91","sha256":"0A:59:E4:CD:A9:21:19:43:81:6F:37:DF:19:5C:47:50:1B:0F:60:D8:24:A5:B3:72:4B:EA:61:E4:DF:2C:27:6C"}}},"request":{"raw":"GET /static/imgs/235.png HTTP/1.1\r\nHost: keplr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 2049\r\nlast-modified: Fri, 02 Jan 2026 19:10:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69581828-801\"\r\nexpires: Tue, 10 Feb 2026 06:32:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q58sFnwyh%2FDb3bOR441wjl3bSi2Gfz1QZ8Yqljv9EkcOCjKsoqIhChMY7C6jysAjC78eajHFcDF77M5Sa2acA4XpOh3%2BJPJANg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc260e6d8ac1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2049,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"9f401fbe0977064b66588d326f51e25d","sha1":"864a33bf0e42e8ea68987beb995cfe2aba7fb98d","sha256":"07f00a5779ff3dba0e5b89bcde4c6ca9608efbd94cfe50a744e1c3b9e83487c8","sha512":"d484b0de6f938c9911627dc6e09741bd5e1e54cd143e4d2c645e5b8334effd0441bd5a8c712ac792a2dc0a7ee5673083f5dce3447b69f7be193df4da86607929","ssdeep":"","tlshash":"63414c2ffecaae7bba2817469c3f5104a1bf44340d1723e544d06d10015ec287d4922b","first_seen":"2025-07-06T21:54:47.442522Z","last_seen":"2026-05-02T18:46:19.796301Z","times_seen":12,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"keplr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socket.keplrvip.vip/api/publics/website?lang=en-us","fqdn":"socket.keplrvip.vip","domain":"keplrvip.vip","tld":"vip"},"ip":{"addr":"66.232.7.50","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://keplr.top/","date":"2026-01-11T06:32:43.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.keplrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 10:22:13 GMT","end":"Sat, 14 Feb 2026 10:22:12 GMT"},"fingerprint":{"sha1":"C5:B9:49:78:B3:28:F8:2D:70:DA:B5:DC:A4:CD:FB:B5:0E:B9:55:5B","sha256":"64:3C:58:DC:82:C9:B4:C4:EF:9B:D0:3F:61:BF:FA:10:6E:95:8F:CB:71:78:E2:EF:6C:25:55:A3:2F:A9:5D:6E"}}},"request":{"raw":"POST /api/publics/website?lang=en-us HTTP/1.1\r\nHost: socket.keplrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\nOrigin: https://keplr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keplr.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:32:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: think_var=en-us; path=/\r\naccess-control-allow-origin: https://keplr.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":264,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"13b4f262ac9a6e5042a8c3c00ebfc784","sha1":"42be67adb74fc98d1b8f8b0539cf7cb90c25f43b","sha256":"26079646958f121ae04e0f9ecf4aa544221577bc9aa3e06c48be1ea545b0c065","sha512":"7a041d6a52d278a30d7cf088f6b67c356b3fa7a770c124e9d6cecda69fb4d47a3750a96b8f32f3f8e0f33f5b15ec89634759b82533f5525e8b5a0d6851350277","ssdeep":"","tlshash":"99d05eff2781a29c967842d502ce301d541621cfca21934c3e4e9ca3aa2496ea44703b","first_seen":"2026-01-11T06:33:12.980344Z","last_seen":"2026-01-11T06:33:12.980344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1296,"timings":{"blocked":508,"dns":0,"connect":250,"send":0,"wait":276,"receive":0,"ssl":257},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"socket.keplrvip.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}