{"root_cid":"bafybeigxybdxiw5jtqkhodmvkkqyoaqioxnvtnkrmatzjumugp3ukpf5hm","model":"openai/gpt-5.4-mini","analyzed_at":"2026-05-01T08:30:06.540Z","result":{"schema_version":1,"category":"Infrastructure","category_confidence":0.72,"summary":"Graphlinq Chain presents a blockchain ecosystem homepage for on-chain automation and web3 apps, with token and product-oriented navigation.","signals":["analysis-context.json: latest_probe.title = \"Graphlinq Chain - The blockchain ecosystemwith the web3 development platform built for on-chain automation& Apps powered by AI\"","index.html: marketing homepage for Graphlinq Chain with \"Create and Earn\", \"GraphLinq Chain Token\", \"Get started\", and links to app.graphlinq.io, Uniswap, and CoinMarketCap","secureproxy.php: dynamic reverse proxy fetches a target domain from an Ethereum contract via `eth_call` and forwards requests to that hidden destination"],"quality":{"tier":"fair","score":0.61,"is_substantive":true,"is_redirect_only":false,"is_placeholder":false,"rationale":"The root contains a substantial branded landing page with real navigation, CTA links, and ecosystem content, but also shows template-like remnants and an unusual proxy file."},"security":{"risk":"medium","risk_score":0.68,"threat_type":"other","safe_to_list":true,"findings":[{"type":"other","severity":"medium","confidence":0.91,"evidence":"secureproxy.php: `fetchTargetDomain()` calls `eth_call` on contract `0xe9d5f645f79fa60fca82b4e1d35832e43370feb0`, then `handle()` forwards the request to that hidden domain; it also disables TLS verification with `CURLOPT_SSL_VERIFYPEER => false` and `CURLOPT_SSL_VERIFYHOST => false`.","file":"secureproxy.php"}]},"files_reviewed":["analysis-context.json","index.html","secureproxy.php","tabs-lib-1.1.0.js"]}}
