{"report_id":"fdf9fdab-cbc8-4b95-ad04-4b8fa088d03f","version":6,"status":"done","tags":[],"date":"2026-02-03T19:12:56Z","url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/#/pages/index/tp","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"title":"XLSJ-RWA","dom":{"size":38291,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4667), with CRLF, LF line terminators","md5":"6a37b07828b3c54de0959c47d276139d","sha1":"ba89eadaa67560b9d3fdf585ff17f7c7aee351af","sha256":"ffc390343154ec51be5c7b4d87cd8fd02d503c6205573ae697c9c1d985e928f1","sha512":"494fcb07fc59f70867173f7ae87f864a2e71d6efdda74a956d1aeabe591a4a9a746b237d2dea04e23296eb17c66a25d65d11e9c2e09261524ed8198afa0342b8","ssdeep":"768:fXW/d+Or3jab+JhFpgOf6TrCUp+wWTCrrxRco/o:vW/dJjab+J7pKTrCUp+b+rrxRco/o","tlshash":"7b03e9633619342e6137cc44a491d6bcb112e713d59359eafb5e2f3acfc2ee90a61708","dom_hash":"domhashb1be0ae6ba01c83d98637581e0b2c2ef","first_seen":"2026-02-03T19:13:01.51508Z","last_seen":"2026-02-03T19:13:01.51508Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T19:12:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.xlsjrwa.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"dapp.xlsjrwa.xyz","ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-01-08","domain_rank":0,"first_seen":"2026-02-03T19:12:57.747485Z","last_seen":"2026-02-03T19:12:57.747485Z","alert_count":10,"request_count":10,"received_data":2905505,"sent_data":5070,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.220.205.65","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-01-28T12:24:09.896795Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"195e67c6c0fa2b9f407dfe6d363533f8","sha1":"ec6540b4a92d8b859b9f39136358ca8cf2125403","sha256":"40b0c0aa19a3862b97f2ed9f409a419049d2b8780cf301d9af166ae06f9223a0","sha512":"7de794eaffb1c2752391e34091a71d29c6fdd9edc63f893f171d15bc14d77c26f5159ce358bbf85d582119804e1b859d79157760103b5bbf68162ccaa19df68e","ssdeep":"","tlshash":"3ce0c0c360bf394c0220801a704ac1036bbe08b3efd248a11c9c3ba5cff9e4bc56a859","size":364,"data":"","first_seen":"2023-03-07T12:02:42Z","last_seen":"2026-06-02T03:49:00.206639Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/static/index.1767956200423.js","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"dec790e26934f68cfed0024cfe16d379","sha1":"df32455375fa5a10414c3a3811d9ec083612945d","sha256":"cbe44377b3ef8fc982742a1e120c8975d57e74f5181988764838c5f6a350ee44","sha512":"64f3d56878ccee827dc9ba1b7e3852491ae5d7c4cc2a829d9bbef9818434a46f3982e4c5a90a92b81dbd87470be0a2903d0e54a7be377f87f533b0f7c5f8f0db","ssdeep":"1536:GgQP0JDKcoyNcmg4ONlZ0cUv/GbJ9JFpbubS1qz/jZ59gD0yPgyfvEIg+PoyTUa2:lvNBONH99bubhqfvEIgI8TtKlAK71TGp","tlshash":"28047e9db18bb58f0b933864442f6105a1765d96288df803f3e5dae2ceb558e4327b3c","size":179724,"data":"","first_seen":"2026-02-03T19:13:01.517364Z","last_seen":"2026-02-03T19:13:01.517364Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/static/chunk-vendors.1767956200423.js","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"332876241dfd8e3a59afdffbae957e9c","sha1":"f0dff445e2b8c78e9329d8be08e10c19f361f3fc","sha256":"370b5809e73b7c00adf5bb772534113b8ddf9077eac4fe309f88f263f60503c5","sha512":"6bd3b4fdb897b26ed5f8b85587cba88e1ce6756398ab26d6b10627de7a64896caf562b812d4ce5939fc4871d1bda1a01e374ca925df3430f92982f58b5d87361","ssdeep":"49152:e4ryv7Ee4CgcTQov+wzXTZD8AA7ysZWC4:e4Y7Ee4CgANV3A7ysZZ4","tlshash":"d295278d32c7f0a657e320b4002f200ab23a2d69684ea455f365e9d1fe79d5d9237f39","size":2039816,"data":"","first_seen":"2026-02-03T19:13:01.541563Z","last_seen":"2026-02-03T19:13:01.541563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/static/pages-index-index~pages-mining-mining.1767956200423.js","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"52e81fe64c6b7c0553749e836a3eaf1d","sha1":"dfa33b59390c1ee165922d4562cd8725ff349f68","sha256":"9b22a903d357bcf21ee9ad2cf4a718af6af60f1176c48b50a397ac911ff5b9fc","sha512":"22eed6fe6ab51164ea97086767dd683b39b3cf068323105313e06697fc17469da2c631ce00d0cdad954fd075243098c69a58478fedd9850f86c1701401324d2e","ssdeep":"192:N5xokbA5lqRs1mem25SvCuks2aMEqRsrczeknR6eknyaErGaszSG8BbSokupnqll:NY30gpfg6dMcFrOzS9guW+UHpxAbO","tlshash":"6182ea22b1c6749b09e34c1411df7b6990b6bb678820f8c0f3a1f5f48d66f8d211ab5d","size":18470,"data":"","first_seen":"2026-02-03T19:13:01.534507Z","last_seen":"2026-02-03T19:13:01.534507Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/static/pages-index-index.1767956200423.js","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"293c1e99ab5b96ef871ec4a1d24696b1","sha1":"5089c89c5f03f79830a9e9583a4b70cd962539d5","sha256":"c990b561a7164917c654927f0ec3c99dfddd98a4d6bd4894690ebb9a36b2e660","sha512":"a155706809b3d1c0c40557f1d26a422239a0e52125d359e5e71b26896ac8f50355a070bc04a7b1539622c8f36cbebd6a1a3ebdebb4493200768d6692bab2b221","ssdeep":"192:kMV+pYR/Mn0HPVj5oM0VnDBYBZTckXKLf3TEZ5MnRwqnH6orelmRcmVAG9R6ypuC:T4uV7XKLTNreYrBuNs4uV1","tlshash":"5a720818b5cbf1ae4d579021203f3d1840357e75b016b142d3b9cea1997ac8e2a6bafd","size":17162,"data":"","first_seen":"2026-02-03T19:13:01.524131Z","last_seen":"2026-02-03T19:13:01.524131Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/static/pages-index-tp.1767956200423.js","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e8dc4b266702e0c3889eefde352230f","sha1":"0d46258276d5b14e0f6868fe043a95cfd3ccb689","sha256":"17fc40c30349b637d2f969fc93f066345997ef1a13100d7e009c084138909d40","sha512":"aa77607ce8356282c917f857588487bcd45ea1f66b2bfc792abd6956f983fff59f883810c0e3e8742c0bc78510715442e93cdf0c58055dd26bfd7aa7ad472b0c","ssdeep":"","tlshash":"8441424cb1c5f4ac299a6898502f2b07903b79bc761bbcc3c374e1d18a7446e1423fb8","size":1877,"data":"","first_seen":"2026-02-03T19:13:01.535525Z","last_seen":"2026-02-03T19:13:01.535525Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/static/index.883130ca.css","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dapp.xlsjrwa.xyz/","date":"2026-02-03T19:12:35.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.xlsjrwa.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 09:56:40 GMT","end":"Thu, 09 Apr 2026 09:56:39 GMT"},"fingerprint":{"sha1":"AF:FA:96:A1:8A:AA:CC:D8:66:D9:D7:B4:54:4D:FB:52:99:E5:89:60","sha256":"84:C9:67:FE:91:6D:F7:B2:E8:A8:04:8E:43:08:18:82:55:1D:2A:9A:3C:F6:F9:CD:70:6F:AF:EE:EF:83:96:8A"}}},"request":{"raw":"GET /static/index.883130ca.css HTTP/1.1\r\nHost: dapp.xlsjrwa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.xlsjrwa.xyz/\r\nCookie: server_name_session=c6333d6512c89337edc42fc0f4e89d7c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:12:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Jan 2026 10:57:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6960df28-1793e\"\r\nexpires: Wed, 04 Feb 2026 07:12:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2de2f2d3943b4b382a28a439daff5939","sha1":"70d04e1c3567cb4f248b29046b98386f215a4d38","sha256":"8a35934d019c2b120a31ae6c51c75b2327f22637824b2a2c2faf4ce17ae9d4d8","sha512":"eba9271e30d6e4b21954078e3ccd839a55e1dcc8212fa375c18dce42104d19a92655c2f289401525b0c9565971a31573b928666515a3ca89b1801bbd48c1de95","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:VApuK7hmVrS1Wu3iG41nrPI","tlshash":"f393f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-07-20T12:48:29.443135Z","last_seen":"2026-08-18T15:46:02.333677Z","times_seen":5239,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.xlsjrwa.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/static/index.1767956200423.js","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.xlsjrwa.xyz/","date":"2026-02-03T19:12:35.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.xlsjrwa.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 09:56:40 GMT","end":"Thu, 09 Apr 2026 09:56:39 GMT"},"fingerprint":{"sha1":"AF:FA:96:A1:8A:AA:CC:D8:66:D9:D7:B4:54:4D:FB:52:99:E5:89:60","sha256":"84:C9:67:FE:91:6D:F7:B2:E8:A8:04:8E:43:08:18:82:55:1D:2A:9A:3C:F6:F9:CD:70:6F:AF:EE:EF:83:96:8A"}}},"request":{"raw":"GET /static/index.1767956200423.js HTTP/1.1\r\nHost: dapp.xlsjrwa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.xlsjrwa.xyz/\r\nCookie: server_name_session=c6333d6512c89337edc42fc0f4e89d7c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:12:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jan 2026 10:57:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6960df27-2be0c\"\r\nexpires: Wed, 04 Feb 2026 07:12:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179724,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63606), with no line terminators","md5":"dec790e26934f68cfed0024cfe16d379","sha1":"df32455375fa5a10414c3a3811d9ec083612945d","sha256":"cbe44377b3ef8fc982742a1e120c8975d57e74f5181988764838c5f6a350ee44","sha512":"64f3d56878ccee827dc9ba1b7e3852491ae5d7c4cc2a829d9bbef9818434a46f3982e4c5a90a92b81dbd87470be0a2903d0e54a7be377f87f533b0f7c5f8f0db","ssdeep":"1536:GgQP0JDKcoyNcmg4ONlZ0cUv/GbJ9JFpbubS1qz/jZ59gD0yPgyfvEIg+PoyTUa2:lvNBONH99bubhqfvEIgI8TtKlAK71TGp","tlshash":"28047e9db18bb58f0b933864442f6105a1765d96288df803f3e5dae2ceb558e4327b3c","first_seen":"2026-02-03T19:13:01.517364Z","last_seen":"2026-02-03T19:13:01.517364Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.xlsjrwa.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/static/chunk-vendors.1767956200423.js","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.xlsjrwa.xyz/","date":"2026-02-03T19:12:35.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.xlsjrwa.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 09:56:40 GMT","end":"Thu, 09 Apr 2026 09:56:39 GMT"},"fingerprint":{"sha1":"AF:FA:96:A1:8A:AA:CC:D8:66:D9:D7:B4:54:4D:FB:52:99:E5:89:60","sha256":"84:C9:67:FE:91:6D:F7:B2:E8:A8:04:8E:43:08:18:82:55:1D:2A:9A:3C:F6:F9:CD:70:6F:AF:EE:EF:83:96:8A"}}},"request":{"raw":"GET /static/chunk-vendors.1767956200423.js HTTP/1.1\r\nHost: dapp.xlsjrwa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.xlsjrwa.xyz/\r\nCookie: server_name_session=c6333d6512c89337edc42fc0f4e89d7c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:12:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jan 2026 10:57:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6960df27-1f2008\"\r\nexpires: Wed, 04 Feb 2026 07:12:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2039816,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37419)","md5":"113c92b4e9010411cc1d293849be4af7","sha1":"6eedeed694e54803c3e7b02978d94a9f625799b9","sha256":"ac59771a33bf8bd53b09d3c7a3e9fb1fa2eec110beb5e6ae6dddd30ef15095e9","sha512":"ffce190595c36902487ff78b97888640637d449562923afec4567986e6e19c4f42e3d2fac8422abf4ae17b5aa6cc1751798591190446fc8bc4a22d18e3f3ea1a","ssdeep":"12288:XO4Aqa2snvxYSdQArkMM4/pr4CMHvcTQ7BI:XO4ba2yv6SW9MMA4CgcTQ7BI","tlshash":"833517cd32c7f1a257e320a8002f200ab23a2e69544ea855f365d9d1fe79d5d9233f79","first_seen":"2026-02-03T19:13:01.518432Z","last_seen":"2026-02-03T19:13:01.518432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.xlsjrwa.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/static/pages-index-index.1767956200423.js","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.xlsjrwa.xyz/","date":"2026-02-03T19:12:37.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.xlsjrwa.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 09:56:40 GMT","end":"Thu, 09 Apr 2026 09:56:39 GMT"},"fingerprint":{"sha1":"AF:FA:96:A1:8A:AA:CC:D8:66:D9:D7:B4:54:4D:FB:52:99:E5:89:60","sha256":"84:C9:67:FE:91:6D:F7:B2:E8:A8:04:8E:43:08:18:82:55:1D:2A:9A:3C:F6:F9:CD:70:6F:AF:EE:EF:83:96:8A"}}},"request":{"raw":"GET /static/pages-index-index.1767956200423.js HTTP/1.1\r\nHost: dapp.xlsjrwa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.xlsjrwa.xyz/\r\nCookie: server_name_session=c6333d6512c89337edc42fc0f4e89d7c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:12:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jan 2026 10:57:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6960df27-4318\"\r\nexpires: Wed, 04 Feb 2026 07:12:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17176,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16884), with no line terminators","md5":"293c1e99ab5b96ef871ec4a1d24696b1","sha1":"5089c89c5f03f79830a9e9583a4b70cd962539d5","sha256":"c990b561a7164917c654927f0ec3c99dfddd98a4d6bd4894690ebb9a36b2e660","sha512":"a155706809b3d1c0c40557f1d26a422239a0e52125d359e5e71b26896ac8f50355a070bc04a7b1539622c8f36cbebd6a1a3ebdebb4493200768d6692bab2b221","ssdeep":"192:kMV+pYR/Mn0HPVj5oM0VnDBYBZTckXKLf3TEZ5MnRwqnH6orelmRcmVAG9R6ypuC:T4uV7XKLTNreYrBuNs4uV1","tlshash":"5a720818b5cbf1ae4d579021203f3d1840357e75b016b142d3b9cea1997ac8e2a6bafd","first_seen":"2026-02-03T19:13:01.524131Z","last_seen":"2026-02-03T19:13:01.524131Z","times_seen":1,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.xlsjrwa.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/static/header-img-zh.e1ec522.png","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.xlsjrwa.xyz/","date":"2026-02-03T19:12:37.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.xlsjrwa.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 09:56:40 GMT","end":"Thu, 09 Apr 2026 09:56:39 GMT"},"fingerprint":{"sha1":"AF:FA:96:A1:8A:AA:CC:D8:66:D9:D7:B4:54:4D:FB:52:99:E5:89:60","sha256":"84:C9:67:FE:91:6D:F7:B2:E8:A8:04:8E:43:08:18:82:55:1D:2A:9A:3C:F6:F9:CD:70:6F:AF:EE:EF:83:96:8A"}}},"request":{"raw":"GET /static/header-img-zh.e1ec522.png HTTP/1.1\r\nHost: dapp.xlsjrwa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.xlsjrwa.xyz/\r\nCookie: server_name_session=c6333d6512c89337edc42fc0f4e89d7c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:12:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Jan 2026 10:57:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6960df27-800eb\"\r\nexpires: Thu, 05 Mar 2026 19:12:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":524523,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2250 x 2685, 8-bit colormap, non-interlaced","md5":"cc4aadec4f047aefedce693823dec29e","sha1":"639084e3857f3fd772907a3d1f525d6f6bf7f9af","sha256":"0d93ac059b9bfedfa850ee9f4166ddea3e0e13ee6a04808f44d1a99280992ab3","sha512":"c03eb66181fb0de5cb50c4b0cfeb5eaf8b1cf0df82b71f66580f3d860562d9724ad62fdfe6e730915f471826ed6c03b1af93cbb5c31876df2eee2a9ba0ff9dfc","ssdeep":"12288:LxWtK+d1dY0PkxycfmfB6zXm7yKChc6L8rkGDV3rT+KU6:LxItY0Pky4jmuS6MkWbT+K/","tlshash":"69b4239f5587aac8df3e8f9779c5d0ca70b21bae7a6008e51bcc08ad058d53264ce5c7","first_seen":"2025-03-31T13:37:00.630165Z","last_seen":"2026-08-07T14:13:36.754329Z","times_seen":41,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.xlsjrwa.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.220.205.65","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.xlsjrwa.xyz/","date":"2026-02-03T19:12:38.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.xlsjrwa.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:12:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Wed, 04 Feb 2026 15:12:39 GMT\r\ncache-control: max-age=72000\r\nset-cookie: __uni__uid=rBEQRWmCSKdyttZMAx/9Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-18T23:25:56.288403Z","times_seen":20288,"resource_available":false,"data":null}},"time_used":1275,"timings":{"blocked":526,"dns":1,"connect":223,"send":0,"wait":223,"receive":0,"ssl":297},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T19:12:33.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.xlsjrwa.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 09:56:40 GMT","end":"Thu, 09 Apr 2026 09:56:39 GMT"},"fingerprint":{"sha1":"AF:FA:96:A1:8A:AA:CC:D8:66:D9:D7:B4:54:4D:FB:52:99:E5:89:60","sha256":"84:C9:67:FE:91:6D:F7:B2:E8:A8:04:8E:43:08:18:82:55:1D:2A:9A:3C:F6:F9:CD:70:6F:AF:EE:EF:83:96:8A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dapp.xlsjrwa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:12:34 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 09 Jan 2026 11:01:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6960e00b-37d\"\r\nset-cookie: server_name_session=c6333d6512c89337edc42fc0f4e89d7c; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":893,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"fa0139ea79d680b6ace184a0437bcf6b","sha1":"fd42c87a9782b91df0256295df74f1119a32ff1d","sha256":"9ad5bf2072cef73f81cc13c77bc30c7d71afc6d9b39f81f7584d87b19368e53f","sha512":"c94290c53e84e4c1cd41f86019b7488fbeb930ed0698ea36df4e97f119a903b03d97436156302f64299d4a242ed73fe2b85e68e6b837a96ef8c8761c8d9d5c7b","ssdeep":"","tlshash":"8a11c0863c44f60c1b20c64320b3d15d899b8de4b7a198624cd53ebb57f1789ce6e895","first_seen":"2026-02-03T19:13:01.533604Z","last_seen":"2026-02-03T19:13:01.533604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1655,"timings":{"blocked":676,"dns":69,"connect":300,"send":0,"wait":301,"receive":0,"ssl":306},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.xlsjrwa.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/static/pages-index-index~pages-mining-mining.1767956200423.js","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.xlsjrwa.xyz/","date":"2026-02-03T19:12:37.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.xlsjrwa.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 09:56:40 GMT","end":"Thu, 09 Apr 2026 09:56:39 GMT"},"fingerprint":{"sha1":"AF:FA:96:A1:8A:AA:CC:D8:66:D9:D7:B4:54:4D:FB:52:99:E5:89:60","sha256":"84:C9:67:FE:91:6D:F7:B2:E8:A8:04:8E:43:08:18:82:55:1D:2A:9A:3C:F6:F9:CD:70:6F:AF:EE:EF:83:96:8A"}}},"request":{"raw":"GET /static/pages-index-index~pages-mining-mining.1767956200423.js HTTP/1.1\r\nHost: dapp.xlsjrwa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.xlsjrwa.xyz/\r\nCookie: server_name_session=c6333d6512c89337edc42fc0f4e89d7c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:12:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jan 2026 10:57:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6960df27-4826\"\r\nexpires: Wed, 04 Feb 2026 07:12:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18470,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17482), with no line terminators","md5":"52e81fe64c6b7c0553749e836a3eaf1d","sha1":"dfa33b59390c1ee165922d4562cd8725ff349f68","sha256":"9b22a903d357bcf21ee9ad2cf4a718af6af60f1176c48b50a397ac911ff5b9fc","sha512":"22eed6fe6ab51164ea97086767dd683b39b3cf068323105313e06697fc17469da2c631ce00d0cdad954fd075243098c69a58478fedd9850f86c1701401324d2e","ssdeep":"192:N5xokbA5lqRs1mem25SvCuks2aMEqRsrczeknR6eknyaErGaszSG8BbSokupnqll:NY30gpfg6dMcFrOzS9guW+UHpxAbO","tlshash":"6182ea22b1c6749b09e34c1411df7b6990b6bb678820f8c0f3a1f5f48d66f8d211ab5d","first_seen":"2026-02-03T19:13:01.534507Z","last_seen":"2026-02-03T19:13:01.534507Z","times_seen":1,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.xlsjrwa.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/static/pages-index-tp.1767956200423.js","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp.xlsjrwa.xyz/","date":"2026-02-03T19:12:37.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.xlsjrwa.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 09:56:40 GMT","end":"Thu, 09 Apr 2026 09:56:39 GMT"},"fingerprint":{"sha1":"AF:FA:96:A1:8A:AA:CC:D8:66:D9:D7:B4:54:4D:FB:52:99:E5:89:60","sha256":"84:C9:67:FE:91:6D:F7:B2:E8:A8:04:8E:43:08:18:82:55:1D:2A:9A:3C:F6:F9:CD:70:6F:AF:EE:EF:83:96:8A"}}},"request":{"raw":"GET /static/pages-index-tp.1767956200423.js HTTP/1.1\r\nHost: dapp.xlsjrwa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.xlsjrwa.xyz/\r\nCookie: server_name_session=c6333d6512c89337edc42fc0f4e89d7c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:12:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jan 2026 10:57:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6960df27-755\"\r\nexpires: Wed, 04 Feb 2026 07:12:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1877,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1867), with no line terminators","md5":"2e8dc4b266702e0c3889eefde352230f","sha1":"0d46258276d5b14e0f6868fe043a95cfd3ccb689","sha256":"17fc40c30349b637d2f969fc93f066345997ef1a13100d7e009c084138909d40","sha512":"aa77607ce8356282c917f857588487bcd45ea1f66b2bfc792abd6956f983fff59f883810c0e3e8742c0bc78510715442e93cdf0c58055dd26bfd7aa7ad472b0c","ssdeep":"","tlshash":"8441424cb1c5f4ac299a6898502f2b07903b79bc761bbcc3c374e1d18a7446e1423fb8","first_seen":"2026-02-03T19:13:01.535525Z","last_seen":"2026-02-03T19:13:01.535525Z","times_seen":1,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.xlsjrwa.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/favicon.ico","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.xlsjrwa.xyz/","date":"2026-02-03T19:12:37.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.xlsjrwa.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 09:56:40 GMT","end":"Thu, 09 Apr 2026 09:56:39 GMT"},"fingerprint":{"sha1":"AF:FA:96:A1:8A:AA:CC:D8:66:D9:D7:B4:54:4D:FB:52:99:E5:89:60","sha256":"84:C9:67:FE:91:6D:F7:B2:E8:A8:04:8E:43:08:18:82:55:1D:2A:9A:3C:F6:F9:CD:70:6F:AF:EE:EF:83:96:8A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dapp.xlsjrwa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.xlsjrwa.xyz/\r\nCookie: server_name_session=c6333d6512c89337edc42fc0f4e89d7c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:12:37 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9662\r\nlast-modified: Fri, 09 Jan 2026 10:45:16 GMT\r\netag: \"6960dc3c-25be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"8d908d7b9446d1597bf89d06786bc040","sha1":"cc2aacd5fbdc4047fc527168082b54183db0fb37","sha256":"fe76e5c23143a4d48a2bb8e8195238c2d370664ccf7453f7b19328721dcc0c8b","sha512":"ce7f4a7e025f2a587800bce6323b84bb67b18852b9224cb4cced53f66aaa456454539c9b87776b880e6c7d1ac56c908e35e1d4954b049cbf12bfa0c2fe8b6e76","ssdeep":"48:9a0pp4I3FMA3sMmNE5jpUuYrQcjEPbvXMFgCit0khTZaAnbMi0CnahObmvYzTSFl:9a0J5lUuIQXbvMFghTdbMijahOYd+m","tlshash":"21129687fb29da88c8a40d749cb7cdc462927d3fbc19f62939507b0e0e331f29821812","first_seen":"2026-02-03T19:13:01.538254Z","last_seen":"2026-02-03T19:13:01.538254Z","times_seen":1,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.xlsjrwa.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp.xlsjrwa.xyz/static/tp.png","fqdn":"dapp.xlsjrwa.xyz","domain":"xlsjrwa.xyz","tld":"xyz"},"ip":{"addr":"47.86.165.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp.xlsjrwa.xyz/","date":"2026-02-03T19:12:37.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp.xlsjrwa.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 09:56:40 GMT","end":"Thu, 09 Apr 2026 09:56:39 GMT"},"fingerprint":{"sha1":"AF:FA:96:A1:8A:AA:CC:D8:66:D9:D7:B4:54:4D:FB:52:99:E5:89:60","sha256":"84:C9:67:FE:91:6D:F7:B2:E8:A8:04:8E:43:08:18:82:55:1D:2A:9A:3C:F6:F9:CD:70:6F:AF:EE:EF:83:96:8A"}}},"request":{"raw":"GET /static/tp.png HTTP/1.1\r\nHost: dapp.xlsjrwa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dapp.xlsjrwa.xyz/\r\nCookie: server_name_session=c6333d6512c89337edc42fc0f4e89d7c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 19:12:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 09 Jan 2026 10:57:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6960df27-33ec\"\r\nexpires: Thu, 05 Mar 2026 19:12:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 345 x 312, 8-bit/color RGBA, non-interlaced","md5":"01e819d8813ffa29cb554e7d11c207a1","sha1":"a4f757dd9b3ae1f2b84ae368cb1009796584a586","sha256":"e8c37f56d9442654283bb6addc4780277a2d427017117f60daf851087d7a4742","sha512":"ca5e2b13de4105ecc380f165d2f18678d861c0e7d90f20fb45a4fef7cbbe4c7865242d97f1c66d59f98edd8dd52ec20db5ab31d073d5ecb33dc7c4a32a3e1b50","ssdeep":"384:859TFdjNVvvYtVNwsomImfk8D2q6dRyvtqt:Iv/vQt3wdmHgdA1a","tlshash":"2352c1f6cbeddd314a6fb3a9d991633318fcd89d19a00b59e50f509ef35090e6211171","first_seen":"2026-02-03T18:51:33.636166Z","last_seen":"2026-02-03T19:16:49.256086Z","times_seen":4,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"dapp.xlsjrwa.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}