{"report_id":"012f9313-7267-43e3-b216-68bd0f252588","version":6,"status":"done","tags":[],"date":"2026-05-18T03:35:21Z","url":{"schema":"http","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":0,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"title":"welcome-BET365","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":0,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-22T03:35:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"photo.365live88.com","ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2022-08-16","domain_rank":0,"first_seen":"2025-11-02T03:06:46.95373Z","last_seen":"2026-05-17T09:49:16.211547Z","alert_count":0,"request_count":1,"received_data":50461,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.geetest.com","ip":{"addr":"104.17.5.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-03-05","domain_rank":196356,"first_seen":"2015-01-16T07:12:35Z","last_seen":"2026-05-15T23:34:08.923708Z","alert_count":0,"request_count":1,"received_data":21655,"sent_data":408,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"j60b.vip","ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-05-15","domain_rank":0,"first_seen":"2026-05-18T03:35:25.812714Z","last_seen":"2026-05-18T03:35:25.812714Z","alert_count":126,"request_count":42,"received_data":3955773,"sent_data":22409,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"GeeTest","description":"GeeTest is a CAPTCHA and bot management provider, protects websites, mobile apps, and APIs from automated bot-driven attacks, like ATO, credential stuffing, web scalping, etc.","website":"https://www.geetest.com","common_platform_enumeration":"","icon":"GeeTest.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b733e809fcd514bdf9414ce77e3f5bb","sha1":"53f38e306721e3a00f340b966ac3f7642bebb57e","sha256":"a05c0b1be0d5a6858cd22804367a5d3a2d23e45de4cc9cfea2abd9fc65766b49","sha512":"07dc77674e4408902b7243c9036e85dc45bfa8ccdf839bd0f9aebf8f38209bb773c5c58733083e52f79fc22fb034dd03664c97f2c84d68646a138ab52bdaa6bd","ssdeep":"","tlshash":"0ec022a60b287f14110310230374f3ac5431c029bc15f202321f42018f50b0d0830a80","size":190,"data":"","first_seen":"2026-02-15T23:20:06.598758Z","last_seen":"2026-05-18T03:40:24.069178Z","times_seen":412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"46c37814c8d855f8d26c8922d6a21d09","sha1":"77a8a7d835aacf3d4c325605b153d011418518a8","sha256":"bf3b91fc06aeb59c3f2832583ce2b70b2b8f4dc45df941aef8611949220ddf84","sha512":"24308fb6d5a6b83f2f8a328fde19300d8ab2a8f2d8116ef4cb160275ed664391e3d52794d94de19ab1a0feadab0168bf0a5e86e2066ccad31c2af2bc0a0ffc4d","ssdeep":"","tlshash":"9531e0282eb29531d423617a1f5bf2843235e62f3148ef043f0dc7661f24d6ba6356d5","size":1702,"data":"","first_seen":"2026-02-15T23:20:06.601892Z","last_seen":"2026-05-18T03:40:24.070602Z","times_seen":410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/index-a3dad144.1777369843125.66a58dcd.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa47bc946b9df160fc4c9d0ccd247727","sha1":"2b81fb3062bb6d32ce5cb43811300ec95a0f3cc1","sha256":"907a77df793605acb0f292d7b450584a9f7cc65e76b8ed19c7ed0b72e3a9f4cf","sha512":"73daf5dd0d9b5f8325bc9fd63618ff31bc76dbcd70b12961aa5d9cdac2b0b570fb832a3815c4cdeb269ed90bd5613e681da42d6b0e668303a7660c6017ee0f83","ssdeep":"6144:DybhFOufhkHLHEY/TtesplVyrYlRlNsmq9DG:+zBuHLHEY/TtesplVyesp96","tlshash":"05742c90f76ce1bd874e55fe7a3290a4902c1b41b0c89e59d29d2944fe6b385feb04bc","size":355104,"data":"","first_seen":"2026-04-29T03:41:13.301567Z","last_seen":"2026-05-18T03:40:23.92115Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/45540.1777369843125.8e1e0acf.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0e497c34e367322be5d24c3b27d661c","sha1":"05738c9aad3a5d894b6d49780014a52200ef950d","sha256":"073a44ee1f965bd3739f07604455eb8940250c073f060303550cdd02ba87109b","sha512":"ea91edbfdf72b73e3fddb4a652393cfd4c1be31242b51f7caa28ee35cf3f66eb42bafff62ffacc3a2b89cdee253e84e2d8ec5e5c5bbc9832053bd5c00df77b3e","ssdeep":"6144:JYD4wFsYiSGfKnCKPP6Xm9sm3MCln1OSgpozfEe5a:JYD4wFsYiSAKNH3TY5","tlshash":"6024e894f294f1be075fc1f1d23b501af35b5e6120cc9ca0d296e6942e20b49da77eac","size":229366,"data":"","first_seen":"2026-04-29T03:41:13.329661Z","last_seen":"2026-05-18T03:40:23.917336Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/35142.1777369843125.e8dc7ade.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5d97dbf77d44812ad4ab30e375fb143","sha1":"6bcf1ac84a9018203641f99e45abae922aef3e4c","sha256":"ca2b371b1bcef9e7641c24d421d68c7a3cef405f36a13597d724987a369a2727","sha512":"56bd2311e73f8ed688d893ac0c7d29d02bcda91e939a50f8cfc9bbe4435125c878b58ef47519618ca42aad8393b248455b87940c32121235c5850777aeac7b6d","ssdeep":"6144:xfhhkpltRm4iyveBHlBfb0wv1e7Ancbt83i2UfIL5LoSltLFe/fwwutUcAct37/k:xfhhkplTm4iyv0HlBfb0wv1aAncbt83s","tlshash":"26743c84b690b17483af86fb72169194d25e0e9460ccace4f27e6e40bf11746f87b5ec","size":341259,"data":"","first_seen":"2026-04-29T03:41:13.452388Z","last_seen":"2026-05-18T03:40:23.941613Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.geetest.com/g5/gd.js","fqdn":"static.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"104.17.5.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d7af3f3975e0fb657b71508b79515f9","sha1":"b36988028196a947b1d67af0856a79e6cf054283","sha256":"41cadd609d64b1958d25afc39e73148bf669fd94f48e848dd47494e7de5762b7","sha512":"ed69806d7f263fec8f66cccf0de8757df3b17cad5629c242e1da0d668830870d42951b8a05cb6780ecf8034800313d02531393745209a5aa3e00ac5d936e1bed","ssdeep":"384:oGm+XLBnDztmdGnnsQn4DgIzHilQVdlsGxCnXdPVcVf:dm+7B6gUKMrxCtCd","tlshash":"5d92204e6cf5a0934a43b078c9af6114b538da53041c9d597d8ce3a4ef684389bbafdc","size":21040,"data":"","first_seen":"2026-04-05T08:11:55.721652Z","last_seen":"2026-05-18T03:40:23.928451Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/8544.1777369843125.875d684f.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"136fc52b262ec03558367f9d050dd488","sha1":"42d2e74acd67477c27524bb4b17399c3c8a5044c","sha256":"7c0850eefec0bebf32593d27d1d85e262ddea0700c9179c4a1396556d6ccf3c2","sha512":"c7c19dcaf0d7f95397efb2d6e96bf11b3e750a26bff4e9bf6a1ed4c53e3b16b75dd5a728e2d2b490b0431acc27ff1849088c26999912f191b672a683ee2b8333","ssdeep":"6144:y/rOTURxxB0Jjytg7DiQPkcsz1aL3p2YO+WidjHrrL:qiJjytgPJPT3p2YpHrrL","tlshash":"bb442c44b291f0b8879b42f7922b4056a17f48a1308cacb4f295ed90be7555c927fbfc","size":261999,"data":"","first_seen":"2026-04-29T03:41:13.358323Z","last_seen":"2026-05-18T03:40:23.914565Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/13575.1777369843125.cda1d494.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"eda98cc14e8c025a359a009951750a20","sha1":"b54dc08d49209bb6953641b57cead1ec1e92d823","sha256":"636dbf0f9dbb30ed3d15582a38bbc4c1857fd1affbe8be077182666b906e7f3e","sha512":"fc6837e6c1ebb1b97998b81be6fab0614b1d30dd0494527bb2fdcaa139d3d26a16798468a172b13ad982cb3ac0651e22ed1d8af5ff62fc501babf9c04c104659","ssdeep":"1536:X17BBHFeKRKp+3ELSPtj6x2DgJoG7PIDmj9VA+s69JAFdE6WIzl+Ik1+eXMa7a4H:hjHoKRKphCnDgJoec+IDWIzls+7Xr0X7","tlshash":"4a141a84764170b8c396a165322f601ae22f789650dd9c24f3789aa47f7470df26fabc","size":194938,"data":"","first_seen":"2026-04-29T03:41:13.356911Z","last_seen":"2026-05-18T03:40:23.934567Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/home.1777369843125.1e63fe95.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac7180fee301b4b62de750803a778412","sha1":"b70eb6223cbd147c8dc23df4d073e9dc641927d5","sha256":"25b167f413e31989cc5856e80f67902b0e84efed7087cea17ec1b5b0dcda5b68","sha512":"4fe2d812d406c786a2204a4f4b370217f4cccb1bf61cbea821e648667325ad32057d1aa30504952de28142b1f4fa0c523f55298834cb567631cc2b7cd37355b6","ssdeep":"3072:f+YNGVSIMctwiYJBuopQuFdBlGLuJuhxffj7TEOiGRlp:f+YNGVSIMctwi+PjFwzffjAGHp","tlshash":"b5140880b5f0e275576fd2b7d7371024b2271686d0ccac60e1f66b187e28796b236db8","size":193619,"data":"","first_seen":"2026-04-29T03:41:13.306134Z","last_seen":"2026-05-18T03:40:23.980002Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"5281f83487c386b7836c0a61310eee71","sha1":"b69aa5eb7750fa2d18540f7a8f28dab10d4b2631","sha256":"5c4f27503b020517fa4d8a831ce6ea7c9b425cbda5603e8e6ce9119aa406cea4","sha512":"4d7ca7094121bc51fd7e24de7f2b9218624f1c7c2b5949e25ad2be53f4b1babc0ac6265a9e20acd2d51fec4e844baebdd7d1aa300a7f52f3b360bf36a8979ca2","ssdeep":"","tlshash":"5c8004047d5d50540000503014740c0d5c133c57403f0314340dcc013fd5c401447441","size":36,"data":"","first_seen":"2025-03-03T20:54:16.013922Z","last_seen":"2026-05-18T03:40:24.071702Z","times_seen":2603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/chunk-init-1656f0b4.1777369843125.32336986.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1aee3b4fdd378acbf851a367f523d6d","sha1":"9b808ee6cd84b9e3969901470ae1c2d1df800ea0","sha256":"a20ad3a83af7751da30c420d96705aa78f39ddbf610789296ce2b47ec3788179","sha512":"71c83f283537df70e91f49c73fe8554e59830f75caf60f372888692946e7c08ca9f13519f082c45ff310ba269151a9a2955fdf6fbc37b68ca4f1e348303725bf","ssdeep":"1536:2twqIPBoVbzfsO9ZuqpiXXIOU6Qgpp6KkB2EnBDsAxdrkm4SgiqvHynjM5TCifM+:2twqhOIK2nCLdyACifMur06/D","tlshash":"30d3ec54b7d0b4b442cf13e6711b2475e3a61ca22058e8f0e31dee647f35689d26faac","size":136038,"data":"","first_seen":"2026-04-29T03:41:13.388607Z","last_seen":"2026-05-18T03:40:24.017025Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/65246.1777369843125.8333614a.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f72169b9753bbfd046b32e8a9c4c9d8","sha1":"76310a9e002235a02b1842b0ff3985e2bd53ef46","sha256":"26b88e6905d829b63d80a3ce48041e1fd4fe98923072fb1d19b371d117e41045","sha512":"05d8f29fd1ac787d4f27a2d8ee901437e310e0ca663822c6270d05c1de8d33a024e312797a984083b277aa054cde3c5995340a26c25bac74fa6c11b339bcfc3a","ssdeep":"1536:j2+iDvYvNjx4Uyao0L8oDNzAuMMsTAQ0mqt2pXYzA4dANVQ:q+iDYvPo0L8oZzAuMMsTA7mqt9zA4dAQ","tlshash":"de73a501f78272384fa7e290220f2026e16e191505ac5bd8f179ffb93ef0954aa7d7b4","size":73494,"data":"","first_seen":"2025-12-17T20:52:09.055572Z","last_seen":"2026-05-18T03:40:24.061324Z","times_seen":930,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/config/telegram.js?t=1779075298050","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ef2154bcfb8399f256c2da15a4cb409","sha1":"e0f8f5578b2e0773ec1d79bb1cec54e1f5d6373d","sha256":"73fa4926373755b52fecfdf3145a0c9953c08af374ea69dda46fe2b3b9ddb022","sha512":"8b64643161386bdefbb7eab04416e78e5e183c50acba7b25b146aa6e733744a326566a01eb7eabb1a0a3f5b87ac8461a7ab3b9ad1c44de37ecea25af09e3eb41","ssdeep":"1536:WK4KZK+Klt3LbbdS4V+vO14KtA9phXTQ+fcZl8LDh7j8d3K+V4WMrnf/NunqxF00:Wj+dgdLbbdSA+1XTQRZ1jSBl","tlshash":"14b31c4c5cf3216285a7b1be8b9f925072759893304def203c4d9ba45f98d3c53eaad8","size":116886,"data":"","first_seen":"2025-05-31T08:16:48.368096Z","last_seen":"2026-05-18T03:40:23.955355Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/83749.1777369843125.7bad5eaf.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d036e00b216c6886ee096346a4aa7d9c","sha1":"8b6cdea36134802a22d5ab4009f69036ef63dd40","sha256":"444030e40d34fa938300dd2cc7b218f3fe47f6a865afd399ea5c1cd5dddae433","sha512":"bab25e53e886cf51cb47125cbb1582da65677fbafa057cc9f770b7a7889ea3bc8a59f60574c16404fba3d974b876f655642a1708a9beedb20b9b47d1b5ba68b0","ssdeep":"1536:lcK/KnqHB3vmeLUw/A6+GplTwsCNgOX8JwTl0sI5pQiVFFsdt+HmQ:rB3vzowo6XTIgOXawTl0sgQi2tkr","tlshash":"6a93e7c4b5f4f5f9279ec5a297364478b02127c5a0c8ace0d2e96e147f1ab92b0758fc","size":91167,"data":"","first_seen":"2026-04-29T03:41:13.335994Z","last_seen":"2026-05-18T03:40:24.021973Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"49bea4e1330b9d3f17c1c143ce23cb3e","sha1":"3a8874032b5979ba1fadfe141c0ebf28baa32fc7","sha256":"07f2a8f457d336c5a0cb2267f53a4be2676d30140da225305675f4b3957eb68c","sha512":"9cf0ea9cec23fb496db40aae14fe1df1a305d4a847e23a724645052c742a5995250f9d7f3f0584d3226aa17c6af04201f72cf7fca01bf4c788df2ab4cf488ad0","ssdeep":"","tlshash":"b580040cdc5544570000501014500cc57c170417453f435f750c04451fd34700007c40","size":36,"data":"","first_seen":"2023-03-08T15:23:49Z","last_seen":"2026-05-18T03:40:24.072204Z","times_seen":2670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ce02dcf11f1634908b4afc4e1bcc632","sha1":"f8911bd806c6ddd3daab7f3eba10081d7af38f74","sha256":"46c7be5f428c72dac25551dbcf74f494989a3cf773ff04f9e115e15ad7dc2893","sha512":"c4f56e0a143f096a106956d55a60f07405a2418d8eec9917a027d0ede74e7119884002051c598445519ff87ad5526d035c221bbcfc65ce817539e6162f157ac3","ssdeep":"","tlshash":"1901735d483748107b2225bd537f5045f1a2516f9e87cc103c1e5b00eff48a72591bd9","size":750,"data":"","first_seen":"2025-08-16T16:35:14.594808Z","last_seen":"2026-05-18T03:40:24.073633Z","times_seen":2195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/22872.1777369843125.dbee35b5.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e916996ddfb5f1c6e2f6cbf5a87b5565","sha1":"7b3812a3cf8758cd6ce5a442d899048e27d1790b","sha256":"a50d9c1f28c0948f0d468428aec46c5d300a84fb71ce27e6790ca8e0f40a955a","sha512":"c5fe69584b305477ce1b4bb12d6a9b4ce2c73ddeb07c133f14d7ec7782b743769b4f48824f326be1ea00c53835dda635e0011b055c6af3ad0876a0344d6be794","ssdeep":"3072:PHW7tB4Vgj5tNlxyUYwOW1YegxYffj7TEOiG1Zl+DJVkzEcx1nKs:PHW7tBwgttXxyUYwOW5ffjAG1T+DJVkV","tlshash":"76f30bd4f2c070f6475f85f2a2275065b26f4d92318c98b0e15ba6547f21b48c7abeec","size":158144,"data":"","first_seen":"2026-04-29T03:41:13.30041Z","last_seen":"2026-05-18T03:40:24.032053Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/7653.1777369843125.5eafcc69.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4849391ecd3ae7038c8eca5da5af6cd4","sha1":"6316de5585ce9c3c90e92da7f445df0f1eb06f39","sha256":"7ace68dcf17129b57d79ff5a5ce030178b60d463fa0b0d1027ff5a62981ae2ef","sha512":"04bf30f23c9fc4ee7df1d106f541932dec50cf5794d313087378b16ed5430d29f75a5891abf4e84657525774f2ee231ac62d9e7640000390ee29a08bf23fbae4","ssdeep":"","tlshash":"47310e98b6a171b243af5af98f3f168bf16794c064edb094d096e2e07cb420c4937d29","size":1501,"data":"","first_seen":"2026-03-20T12:57:26.686565Z","last_seen":"2026-05-18T03:40:23.988625Z","times_seen":220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d7029dce5d85a5da627234c9d9dec9a","sha1":"24fb150f1cc1df574ff3e2cafbaa0da15372f707","sha256":"b0ff82425661555aef2b423d91265672271ef5854e3e7b815e12f9b363fd34d9","sha512":"db505fbc49659020a42eb8e2064c9aa0aaebb166f309faf0245432a9a5ceb1d921a6cd040d445c99d38108057d3c9aa84556a5b47433b7401ae410239a28202f","ssdeep":"","tlshash":"f741027d826345a51973346a1f9e734836f340b31149e9113e5c8a802fa9a5f83b7bfa","size":2333,"data":"","first_seen":"2026-04-05T08:11:55.739213Z","last_seen":"2026-05-18T03:40:24.074322Z","times_seen":213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/chunk-svg.1777369843125.1e4dfc16.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"17dc7d24243be411dfc65e6d3bfc3fed","sha1":"040dff237c788f6720e1e7ad8903f103cb86db73","sha256":"4296d5094a19dae430c40d8315056ffcd226eafe5012f293d988d2b631c682e1","sha512":"742a36b45941527965abaaa6e1443e4668e5af5085a1166b561059df61a9f42f0096cbc9f80dd9cd845cefd166d5d84a4e6282eb16100e078d28e6c0305a6a26","ssdeep":"3072:h8nz2uaLZSZvx6Q/sIPrekK+m36Ua94sRZI7gbpF/:h8nz2uasNxpXPrekK+m36UHsE4pF/","tlshash":"bfa4fcb4c190f4edf704ce196e7c9e1c50321688e0a9e9e52da9fe0d9e85d6b241cdec","size":464072,"data":"","first_seen":"2026-04-29T03:41:13.396807Z","last_seen":"2026-05-18T03:40:23.923892Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/chunk-common.1777369843125.4adb46f5.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd30be8efc49091ace6b6cba1d19f85e","sha1":"dcb13a103a96a9346297f81fa22518579b7694b7","sha256":"5aeec070f92421551adae5477625ba84ca8f44c1fc9c181efb18e241c0179776","sha512":"42df127ca6094903dba8af9a2166ce68c1386c59b2d7e48071f6c33ffe1c0e81b2a3673efd413142e6699be9719f79f6172c9f5aaea6fd8d45518f8d09aef6df","ssdeep":"1536:bvBBzbgGcdWUa2UTf6oryXHuLmbErF/G7D1dMI59HTsY5kN/voVGAClVbGD3tFkK:bvBBfRTf6yjFetHTsY5s/voVGAcgD3t","tlshash":"0ff3e8c5b3a0f07e9a1ed53779331499b12f758278c87c60f1a1ade67f1a704a436ca8","size":160123,"data":"","first_seen":"2026-04-29T03:41:13.32854Z","last_seen":"2026-05-18T03:40:23.918038Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/configPage.js?v=4/28/2026,%2017:55:48","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6aa74bb352ef198ba3e1c9a4b01b014","sha1":"2ea8bd6b5045475a36432f7665a129728e822d9e","sha256":"73828e873c0b6e847b37d78941ca436247471dfc90a12f743964f869f75abd5c","sha512":"2faaf24fdf1e4da637af8e9f82d1778bf061b00752dfca0c8f73432ba236a7b69410a7ad2a73727bc83e6cd631fd6555c3cc0d9d3a5d8a7f81818dd66566011f","ssdeep":"","tlshash":"be117aaf57444dffcf1d7e00a08b0a5ea8bc61d261889d4da8e9cf29e1c99002378978","size":949,"data":"","first_seen":"2025-09-04T00:49:32.949926Z","last_seen":"2026-05-18T03:40:23.945625Z","times_seen":1448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/theme.config.96698fb2.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a9a87f3e8804b6c2e87c2ef64cb06ac","sha1":"b57b77abc2f2694ee5b5404a08100b3bdbae1dbb","sha256":"1597153bb2084ffdd78db4687cd9efcd0d7d54f7f460c9b717988ff3dc4f640c","sha512":"5d9bbb05a39e07f2ccf8ac572dcc12d0ae5af13998abb2a6167619b1774272761b562cbbd40b287c404261553e88a7c872e1cfd2943678f59422161d10cee15a","ssdeep":"1536:D2JREobpmtlIRM4Sb2mcTa2mnzyJog9CcHWhM:qYtlGu1Jnz45Hl","tlshash":"23b3bb7ae20c963a6177acbfb46de111c12e9c0cab1d5fdef03d60a25710669c831de9","size":108069,"data":"","first_seen":"2026-04-29T03:41:13.38605Z","last_seen":"2026-05-18T03:40:23.995888Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/chunk-init-c0d76f48.1777369843125.2d292e02.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb71ab6debf3abe346c8c4d941813d15","sha1":"88116abc111aad2e9e1b1d0974de9d97cd891e0f","sha256":"3dca15bdb644d02cedbfe3adaeed7ff4c47508d664ad1ce6b361dcef7a5423b5","sha512":"eb604132673651b6a0646263fed02220557b65080b323b03513053af5662af520808cd469c00f7ad99ed16fcf9a2ab5374b89477cf8f8a9f8ed89f6a313afd7f","ssdeep":"1536:xTG5pxPvO2lSV822bv0bcbpM/igw/aIwC23QOoKILbjxo4wc0tvB6xVS/J+pKY3O:Mvz/Dp5/92xoKa/x5wc0dB5/J+UU0","tlshash":"6ef31b987392b1b847dba6e152371075b57e1dd73088e8f0c169a6803f31a9cd52afec","size":161198,"data":"","first_seen":"2026-04-29T03:41:13.437512Z","last_seen":"2026-05-18T03:40:23.93276Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d053d2da6a5968d7b648d3f7360092a","sha1":"32ae5713edeb00288a3f8f3c02462a5d0ca9dbb3","sha256":"8896d194e4c39e87f52924073dd2d56b4aaab46fc9f7c56a57534545eef1d7f3","sha512":"01f9b63cd24ab6e0e097637341b78cda657192f98e37a39f0f75548f8fe0180418a86594df76858aee7d514282ac4dfb8263e1729ff325035897b841d09206a3","ssdeep":"","tlshash":"82f0a00e0ee548131963707a4c0f9201203b2513414eea08bffe9bb24f92a688a679cc","size":550,"data":"","first_seen":"2025-03-03T20:54:16.018132Z","last_seen":"2026-05-18T03:40:24.075057Z","times_seen":2667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/config/initGeetest4.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"87855e19802d75b55afa7bcf3af515c1","sha1":"4af373375728a98d623f2299a68a91e150f2672e","sha256":"9ec8a5ef8c8ffe369dd1a5c4730dce6570c0d90955798c0be4ac04ef1c8f4baa","sha512":"3baa6d9e916abfb3d38b7ebb9372c5987e8f10534bb978383751c0094f8f5a3e764f9b8e44a73d9d4871cbaeca7e1939f0ffaf9499af5c4a71f64c3588167d85","ssdeep":"192:23aP8Ha0D+Nu5dq+EvNiqc4K25MB5VYaiQwSL4SScQVy8QRHIsGiz0iX9rES6Myy:2fe61w1iXKb2sMGUI+KQTwwHlB","tlshash":"00621d0d68f764534553b4388b9fb014b5388a53042cde41be9ce354afa843d9bbabdc","size":14975,"data":"","first_seen":"2026-02-16T20:32:40.162764Z","last_seen":"2026-05-18T03:40:23.919328Z","times_seen":424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"25ba01da3f0b1b471747da4637862cd0","sha1":"0c5b0ce449b041467ab3bf825d2cb6c5dc9c8250","sha256":"5f9229d7d1276d1475836391ce453b7432244854be7368ae4c4c590f22789af0","sha512":"58d82418709bd36179a89dd6af167368c35512e8abc68ead43e9be0e5c5fd5027d83289b2ee30e6a211239b4d67790af51039cba61a54b4184e556741437c4a4","ssdeep":"192:K2wqx5Cvtib5XOQRzlaECoXZTAoV51nsPhwzvBa/id3+36a/E/97g6I52MdobsIc:K2VwiYwJvSoVXsp+pa/iZcVk97g6nMu6","tlshash":"8e323b69a5b71bba25673036277f301889b080630319fd947c0ff61e4fa5436629bbe3","size":11906,"data":"","first_seen":"2025-11-05T12:10:48.37972Z","last_seen":"2026-05-18T03:40:24.075868Z","times_seen":1477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba4d957ec99a023d40fedffe8f2c9132","sha1":"32e9e162bad0ea93fde3f137877e95bbbb574327","sha256":"24e8b158f0130e4778f80107b4c038c9edda27db68dd815e66221cc1fb5837b0","sha512":"d0e45e79632f3ec13d043d91c87ef458d1ded7256a3aebe641b09e205ccd00b863424342238a41b73fd7173eaf8a260640fb3110c8a48422ef03050b691d5e2c","ssdeep":"","tlshash":"0311c05a59d18132665b303735bd43887724a013d184df413dcc99557f98da5cabf6c4","size":934,"data":"","first_seen":"2025-09-26T05:04:14.419402Z","last_seen":"2026-05-18T03:40:24.076765Z","times_seen":1623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/21954.1777369843125.57c97863.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e41dd7729067b884faab37fcd9af417","sha1":"11acbef297a8f924deae47393678fb42c36ece7e","sha256":"9535e9e039663a829c5e5ffb31879f836c96c5e1f58306318b45a64f4a6687ea","sha512":"228b5a935e11e121070f4a6710af8ed39e21fe53a228c99bb4befc116c54f37693f2c9e5b08d202dd5b8375b84c4fbf63918cf013f6af5d4f71464f93524d3c3","ssdeep":"768:QPhaSfmzKrMdvf0eMQ/96loumY1PI1yBK9LudEz+yUy51y9y0yk6Dio+ILqpTeY:/81R6Ipyk6o","tlshash":"a7132088fac2b06dd3eb7330857f505ae66a1dc0668c5438e260d6917e7198dc1fb5f8","size":41968,"data":"","first_seen":"2026-03-18T07:07:19.558046Z","last_seen":"2026-05-18T03:40:23.921877Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-18T05:37:38.104687Z","times_seen":83894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-18T05:39:36.301271Z","times_seen":660272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/home","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-18T05:39:36.30215Z","times_seen":219647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"1819d564e53ca3aee1e40e152b27969f","sha1":"d6ba8b2ea482306f8d62a87d3376b215db58de37","sha256":"962fb187f019fdce89d20672b12339ae7d7b6744ee83f7000c517b96be5d4ae4","sha512":"cd5ca7e5ae26c418994c49a01b43eb6b4d8a1ac8f3dd7455d2a75f59150704f402cef5a72a020c615790358ab33599d82478450eb71d443364fcdc54ecd3e3aa","ssdeep":"","tlshash":"3aa002832f188541240218568421b689ec54d564f599dc1421a46552922579d0925950","size":59,"data":"","first_seen":"2026-05-18T03:35:30.481367Z","last_seen":"2026-05-18T03:35:30.481367Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"j60b.vip/js/chunk-init-c0d76f48.1777369843125.2d292e02.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/chunk-init-c0d76f48.1777369843125.2d292e02.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:49 GMT\r\netag: W/\"69f08425-275ae\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b3f049c8\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"eb71ab6debf3abe346c8c4d941813d15","sha1":"88116abc111aad2e9e1b1d0974de9d97cd891e0f","sha256":"3dca15bdb644d02cedbfe3adaeed7ff4c47508d664ad1ce6b361dcef7a5423b5","sha512":"eb604132673651b6a0646263fed02220557b65080b323b03513053af5662af520808cd469c00f7ad99ed16fcf9a2ab5374b89477cf8f8a9f8ed89f6a313afd7f","ssdeep":"1536:xTG5pxPvO2lSV822bv0bcbpM/igw/aIwC23QOoKILbjxo4wc0tvB6xVS/J+pKY3O:Mvz/Dp5/92xoKa/x5wc0dB5/J+UU0","tlshash":"6ef31b987392b1b847dba6e152371075b57e1dd73088e8f0c169a6803f31a9cd52afec","first_seen":"2026-04-29T03:41:13.437512Z","last_seen":"2026-05-18T03:40:23.93276Z","times_seen":111,"resource_available":true,"data":null}},"time_used":1086,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1086,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/chunk-init-1656f0b4.1777369843125.32336986.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/chunk-init-1656f0b4.1777369843125.32336986.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-21366\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b3f049c9\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136038,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44088)","md5":"a1aee3b4fdd378acbf851a367f523d6d","sha1":"9b808ee6cd84b9e3969901470ae1c2d1df800ea0","sha256":"a20ad3a83af7751da30c420d96705aa78f39ddbf610789296ce2b47ec3788179","sha512":"71c83f283537df70e91f49c73fe8554e59830f75caf60f372888692946e7c08ca9f13519f082c45ff310ba269151a9a2955fdf6fbc37b68ca4f1e348303725bf","ssdeep":"1536:2twqIPBoVbzfsO9ZuqpiXXIOU6Qgpp6KkB2EnBDsAxdrkm4SgiqvHynjM5TCifM+:2twqhOIK2nCLdyACifMur06/D","tlshash":"30d3ec54b7d0b4b442cf13e6711b2475e3a61ca22058e8f0e31dee647f35689d26faac","first_seen":"2026-04-29T03:41:13.388607Z","last_seen":"2026-05-18T03:40:24.017025Z","times_seen":112,"resource_available":true,"data":null}},"time_used":1086,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1086,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/kc523-1/sponsor/sponsor.json?1777369782162","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:04.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor.json?1777369782162 HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:05 GMT\r\ncontent-type: application/json\r\ncontent-length: 646\r\nlast-modified: Sun, 24 Aug 2025 06:03:49 GMT\r\netag: \"68aaab45-286\"\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\nserver: Nginx\r\nl-safe: 1779075305=D9+JjqhIZ2X+ST3Icdn/Iem1m+VWwQwtrW55JeuwwcGHW2zCIGJ+G+LNb/0vmWvKPso+LW8thL9+x9xpGyvaXmcomvfn9UM80cRM1tvQHzoLYTAj0kTeRJj/0ykQN0tQF+aKpLHxMF/PcTt37wEDYmMsGjykRQd4ZTe6Rf+4OAnH21/1468QyyP69oZUkLIb\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926ce8349fc\r\nx-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":646,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"10d2161de8cf99c474812f4c43645a26","sha1":"71884ef7281cdcb5084088f16d4550ce8790e634","sha256":"bb02fd7438bb49dd4decb6f76a71f11e93355332fd9f965d6f9f13bb8175aeca","sha512":"bf0fd1232309fcc5582d5c42644e1c7b4b8d235b1066e988ff55e0dd94a956f89742401f00c2d904359041c8e0c2bac8e9316252fab60db5eb0a3b4c935172f0","ssdeep":"","tlshash":"d8f0f44ad8b25b93211fb57c58cd050470294a8f0eccaac4baac987c4f598ddd1e839e","first_seen":"2023-06-16T04:51:50Z","last_seen":"2026-05-18T03:40:23.928993Z","times_seen":1518,"resource_available":false,"data":null}},"time_used":5421,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4896,"receive":525,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/65246.1777369843125.8333614a.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:04.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/65246.1777369843125.8333614a.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-11f16\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075305=D9+JjqhIZ2X+ST3Icdn/Iem1m+VWwQwtrW55JeuwwcGHW2zCIGJ+G+LNb/0vmWvKPso+LW8thL9+x9xpGyvaXmcomvfn9UM80cRM1tvQHzoLYTAj0kTeRJj/0ykQN0tQF+aKpLHxMF/PcTt37wEDYmMsGjykRQd4ZTe6Rf+4OAnH21/1468QyyP69oZUkLIb\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926ce8349fe\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73494,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48666)","md5":"4f72169b9753bbfd046b32e8a9c4c9d8","sha1":"76310a9e002235a02b1842b0ff3985e2bd53ef46","sha256":"26b88e6905d829b63d80a3ce48041e1fd4fe98923072fb1d19b371d117e41045","sha512":"05d8f29fd1ac787d4f27a2d8ee901437e310e0ca663822c6270d05c1de8d33a024e312797a984083b277aa054cde3c5995340a26c25bac74fa6c11b339bcfc3a","ssdeep":"1536:j2+iDvYvNjx4Uyao0L8oDNzAuMMsTAQ0mqt2pXYzA4dANVQ:q+iDYvPo0L8oZzAuMMsTA7mqt9zA4dAQ","tlshash":"de73a501f78272384fa7e290220f2026e16e191505ac5bd8f179ffb93ef0954aa7d7b4","first_seen":"2025-12-17T20:52:09.055572Z","last_seen":"2026-05-18T03:40:24.061324Z","times_seen":930,"resource_available":true,"data":null}},"time_used":4891,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4891,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/css/46431.1777369843125.7dc7cfcf.css","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /css/46431.1777369843125.7dc7cfcf.css HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-552d2\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b3ee49c4\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":348882,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e9d628daba48b940e276f091325ad9d3","sha1":"fdad8ce2a89ba61e92793906f2c486dba4ab6830","sha256":"8335d1e28f036809b567aa56d38506372340045a62595b1d896dd659faf5ec5f","sha512":"ca21fb5041ed2e5dfc57f5080b7cfc4bfad2aa4f9e7556680d57ac7d82669ff16ee746998b3d016994ae96c770b8a582ef129b01f52e5dace961e2625cc15ac9","ssdeep":"6144:z4+4r0H8Tu4+4r5cRlGuEQUQ929sYbnpTP40:z4+4ZTu4+4La0","tlshash":"0774fa6caf1030ae15a7cb27b660f5199c36a443f9bfde9af3e53d580789a510623c13","first_seen":"2026-03-06T18:01:11.525986Z","last_seen":"2026-05-18T03:40:23.946429Z","times_seen":251,"resource_available":false,"data":null}},"time_used":1087,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1087,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/css/83749.1777369843125.2e202a68.css","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:04.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /css/83749.1777369843125.2e202a68.css HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-6f2f\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075305=D9+JjqhIZ2X+ST3Icdn/Iem1m+VWwQwtrW55JeuwwcGHW2zCIGJ+G+LNb/0vmWvKPso+LW8thL9+x9xpGyvaXmcomvfn9UM80cRM1tvQHzoLYTAj0kTeRJj/0ykQN0tQF+aKpLHxMF/PcTt37wEDYmMsGjykRQd4ZTe6Rf+4OAnH21/1468QyyP69oZUkLIb\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926cdea49f2\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28463,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28463), with no line terminators","md5":"1ead8072763d5fe20963f033dc63d94e","sha1":"36eeb0853a1b5681ab464dc1ef3682160e420e60","sha256":"8f014d5d9b2798ecfc473bac7c23f80295b94af3cbeff054fcaf973b286f8240","sha512":"92670a870b9db4259e71072ab72699e3431fa9eb53027f4b90c954b51eaf1869f5f50987808e5c625e9101ea4ea3aca655b81ba73f3ba2ced4cd480eb9a915cc","ssdeep":"384:DYCKpsUIc1F8l1TANI34yQyqPPQwmfzIfRbHx6+OhCcbakzeYaTONdqdK:DYCKpcPE64yDqbodqdK","tlshash":"07d2739ae5d4b13e6c1fbb35ebc5a1ecb1399450df620e7af202762547c3af1012216d","first_seen":"2026-04-29T03:41:13.425526Z","last_seen":"2026-05-18T03:40:23.933347Z","times_seen":101,"resource_available":false,"data":null}},"time_used":5059,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5059,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/chunk-common.1777369843125.4adb46f5.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/chunk-common.1777369843125.4adb46f5.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-2717b\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b3f049ca\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":160123,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fd30be8efc49091ace6b6cba1d19f85e","sha1":"dcb13a103a96a9346297f81fa22518579b7694b7","sha256":"5aeec070f92421551adae5477625ba84ca8f44c1fc9c181efb18e241c0179776","sha512":"42df127ca6094903dba8af9a2166ce68c1386c59b2d7e48071f6c33ffe1c0e81b2a3673efd413142e6699be9719f79f6172c9f5aaea6fd8d45518f8d09aef6df","ssdeep":"1536:bvBBzbgGcdWUa2UTf6oryXHuLmbErF/G7D1dMI59HTsY5kN/voVGAClVbGD3tFkK:bvBBfRTf6yjFetHTsY5s/voVGAcgD3t","tlshash":"0ff3e8c5b3a0f07e9a1ed53779331499b12f758278c87c60f1a1ade67f1a704a436ca8","first_seen":"2026-04-29T03:41:13.32854Z","last_seen":"2026-05-18T03:40:23.918038Z","times_seen":110,"resource_available":true,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1085,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/8544.1777369843125.875d684f.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/8544.1777369843125.875d684f.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-3ff6f\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b54249cf\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":261999,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"136fc52b262ec03558367f9d050dd488","sha1":"42d2e74acd67477c27524bb4b17399c3c8a5044c","sha256":"7c0850eefec0bebf32593d27d1d85e262ddea0700c9179c4a1396556d6ccf3c2","sha512":"c7c19dcaf0d7f95397efb2d6e96bf11b3e750a26bff4e9bf6a1ed4c53e3b16b75dd5a728e2d2b490b0431acc27ff1849088c26999912f191b672a683ee2b8333","ssdeep":"6144:y/rOTURxxB0Jjytg7DiQPkcsz1aL3p2YO+WidjHrrL:qiJjytgPJPT3p2YpHrrL","tlshash":"bb442c44b291f0b8879b42f7922b4056a17f48a1308cacb4f295ed90be7555c927fbfc","first_seen":"2026-04-29T03:41:13.358323Z","last_seen":"2026-05-18T03:40:23.914565Z","times_seen":110,"resource_available":true,"data":null}},"time_used":2384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/kc523-1/noData/cms_moren.png?1777369782162","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:04.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /kc523-1/noData/cms_moren.png?1777369782162 HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 24 Aug 2025 06:03:49 GMT\r\netag: W/\"68aaab45-4d14\"\r\ncache-control: public, max-age=2592000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075305=D9+JjqhIZ2X+ST3Icdn/Iem1m+VWwQwtrW55JeuwwcGHW2zCIGJ+G+LNb/0vmWvKPso+LW8thL9+x9xpGyvaXmcomvfn9UM80cRM1tvQHzoLYTAj0kTeRJj/0ykQN0tQF+aKpLHxMF/PcTt37wEDYmMsGjykRQd4ZTe6Rf+4OAnH21/1468QyyP69oZUkLIb\r\nage: 131907\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926cec14a11\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19732,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 215 x 214, 8-bit/color RGBA, non-interlaced","md5":"f3c825751a70d4aad8da2ce57f76acf6","sha1":"732da443668abb03a79a70df2d0ea8d801158655","sha256":"c395f4c1941459ef620f6df95fabd39f9ac98e03f6a389886bf224157557ce41","sha512":"a3b3fa2a216c10d331fea4771b916825d0605b94e21ac242d152d7c5e4b984cf3baad7a3fd071dde3432162037514d756cce1a0f699baf3dc98eaf75483c91b0","ssdeep":"384:64pTwcIHFqFpIlD8SqhwFLW/na2PvyQXSOKvOi58KUezsTT5ZOon:67XlROe8WvOAPHQv","tlshash":"a592d0d8abcb6705bb132b43b941a3558e0dfd6a130b9bb131782805ee16151e8d7e3f","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-05-18T03:40:23.930262Z","times_seen":1398,"resource_available":false,"data":null}},"time_used":4783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4783,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/theme.config.96698fb2.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /theme.config.96698fb2.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-1a625\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b3ef49c6\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108069,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38260)","md5":"6a9a87f3e8804b6c2e87c2ef64cb06ac","sha1":"b57b77abc2f2694ee5b5404a08100b3bdbae1dbb","sha256":"1597153bb2084ffdd78db4687cd9efcd0d7d54f7f460c9b717988ff3dc4f640c","sha512":"5d9bbb05a39e07f2ccf8ac572dcc12d0ae5af13998abb2a6167619b1774272761b562cbbd40b287c404261553e88a7c872e1cfd2943678f59422161d10cee15a","ssdeep":"1536:D2JREobpmtlIRM4Sb2mcTa2mnzyJog9CcHWhM:qYtlGu1Jnz45Hl","tlshash":"23b3bb7ae20c963a6177acbfb46de111c12e9c0cab1d5fdef03d60a25710669c831de9","first_seen":"2026-04-29T03:41:13.38605Z","last_seen":"2026-05-18T03:40:23.995888Z","times_seen":110,"resource_available":true,"data":null}},"time_used":1086,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1086,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/undefined","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:04.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /undefined HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:05 GMT\r\ncontent-type: text/html\r\ncache-control: public, s-maxage=600, max-age=0\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075305=D9+JjqhIZ2X+ST3Icdn/Iem1m+VWwQwtrW55JeuwwcGHW2zCIGJ+G+LNb/0vmWvKPso+LW8thL9+x9xpGyvaXmcomvfn9UM80cRM1tvQHzoLYTAj0kTeRJj/0ykQN0tQF+aKpLHxMF/PcTt37wEDYmMsGjykRQd4ZTe6Rf+4OAnH21/1468QyyP69oZUkLIb\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926ce8349fd\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GeeTest","description":"GeeTest is a CAPTCHA and bot management provider, protects websites, mobile apps, and APIs from automated bot-driven attacks, like ATO, credential stuffing, web scalping, etc.","website":"https://www.geetest.com","common_platform_enumeration":"","icon":"GeeTest.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24409,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5777), with LF, NEL line terminators","md5":"b79973e77d284db9fc0f935f69893a56","sha1":"17c81262d199982959c879710b4ac7d219b6e162","sha256":"c24704cc62eb14272c75629136ad777369c2f52e1d49de6842b66c9be5314dc9","sha512":"33740d56dfde56d724839b17e381ee749bce9e48eeb70d46f1eaca18e1cd5c166c662f99f40224ff60b663bbda0aa59ec12d80da483ca066f38560dd6bc6eefe","ssdeep":"384:Eo3ERrxqNBPJ+96junwIX2VwiYwJvSoVXsp+pa/iZcVk97g69isplIiz:EpRVqrJ46junwIXiNYiKop/E6wkp02lp","tlshash":"0db2075a9df34a762523303a1fbfb20879b0c0174209ed443e4de7584fd19aa52e3be6","first_seen":"2026-05-18T03:35:30.44431Z","last_seen":"2026-05-18T03:35:30.44431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4893,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4893,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/index-399e2569.1777369843125.70d3d47c.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/index-399e2569.1777369843125.70d3d47c.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-5cf4\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b54249d2\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23796,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23796), with no line terminators","md5":"6b35d598f9222431824849a2ef5b6359","sha1":"c7409a8c4b4e0d925aabc7be2afbb31941494256","sha256":"b82b7f362bca79155342b54e2494f4086e7181eba033c4b667ff885b2bc33439","sha512":"3fff55c5f39ae811ca094e65168d57fdd6ddeafb608e8209b24ed3587dbdcb4580c09ec8361c1db0557843a26bd10552e9a5a14ad827c876ecccef7036d8e689","ssdeep":"384:EZSANHmDGj4aePlBTSQwf+q0ht1wtzgNA2K88ZdZ11YcpK21p5F3oWf0Af/nBtUM:HnDGcPPlRef+BhtutUHKTZXYeT5FYxA9","tlshash":"0eb2b6e53392bdb4c24f9276f23a68ecc43f9151c34fc4f8d264bd947c98644aa92784","first_seen":"2026-04-29T03:41:13.403184Z","last_seen":"2026-05-18T03:40:23.915305Z","times_seen":109,"resource_available":true,"data":null}},"time_used":2376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-18T03:34:56.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:57 GMT\r\ncontent-type: text/html\r\ncache-control: public, s-maxage=600, max-age=0\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075297=8laP0RtMfaF0HT8NfcXwJx3ICOxzN6KqI75X2Rw40OEjl2wQ5G2FP/KKyHteL2//YXUuV6GHuVC98aIZtACJxrZbaXDFNN6Fx7BcFXk29ZyWJY6nAP3CaXT56QlECIyVjdOgFNG5P7caBWZpt7A+ZPJMYScTwWloOzaKJoPd0z5SeY13ASb+90QViKLQeHDz\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b15e49c0\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GeeTest","description":"GeeTest is a CAPTCHA and bot management provider, protects websites, mobile apps, and APIs from automated bot-driven attacks, like ATO, credential stuffing, web scalping, etc.","website":"https://www.geetest.com","common_platform_enumeration":"","icon":"GeeTest.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24409,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5777)","md5":"de12f9ef6903679d754b67293200edd6","sha1":"fd38488a0db4f56c62536cbdb4c5957ca9091148","sha256":"735a322de1f2ded527f569184d7c6c57ddaca2726df1b527386667704e130688","sha512":"6e460e29f99686c44c928a124be7cdc3b1633d6584c9d7e0256c69a1d328ec0cbe7f401d79385a18d16d458606e132567e8f7fa5e4e7ce56a3ffadc6c7b63b95","ssdeep":"384:Eo3ERrxqNBPJ+96junwIX2VwiYwJvSoVXsp+pa/iZcVk97g6nMusplIiz:EpRVqrJ46junwIXiNYiKop/E6wkpcu2T","tlshash":"62b2185a9df349762523303a1fbfb20879b0c0274209ed443e4de7594fd59aa42e3be6","first_seen":"2026-04-29T03:41:13.317002Z","last_seen":"2026-05-18T03:40:24.013834Z","times_seen":109,"resource_available":true,"data":null}},"time_used":2927,"timings":{"blocked":1244,"dns":317,"connect":305,"send":0,"wait":438,"receive":0,"ssl":619},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/css/7653.1777369843125.0ab0fca2.css","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:04.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /css/7653.1777369843125.0ab0fca2.css HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-1439\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075305=D9+JjqhIZ2X+ST3Icdn/Iem1m+VWwQwtrW55JeuwwcGHW2zCIGJ+G+LNb/0vmWvKPso+LW8thL9+x9xpGyvaXmcomvfn9UM80cRM1tvQHzoLYTAj0kTeRJj/0ykQN0tQF+aKpLHxMF/PcTt37wEDYmMsGjykRQd4ZTe6Rf+4OAnH21/1468QyyP69oZUkLIb\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926cd5349f0\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5177,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5177), with no line terminators","md5":"a0ef4268641ef0b005737ce8cc0c4b44","sha1":"9bb50b9000a419e7a701392b0d7d6c992cf585bb","sha256":"f64c7a7e6ecd620d1c7f8cc67e1eda83a0a115a8d86f3954efdaba3c09d62e66","sha512":"07605ebd7e16aef28f0ad5ed406f29ea9b77e8ba6b2079c810aacf8faf0b4a8d18d4f7775c62860cbf6d4379729a60076103a4daa833c860ddebeee3793ccbe2","ssdeep":"48:ZSPkOO2s2L5Pukasq+nArLkrL4QuQKhUjUkM5P6CdRDRWURcWaTHR/:iOvyP2r4rEDFP61LR/","tlshash":"d1b1412f01703349641bad6807dc67098325d8b399eb37da259d2a0dcbc3f861eb718b","first_seen":"2025-06-26T16:31:28.933081Z","last_seen":"2026-05-18T03:40:24.0332Z","times_seen":2222,"resource_available":false,"data":null}},"time_used":5192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/ecb/8f8306425cb6740e78b2802ff5047afa96a8ae096bee393c421cac4924db741c4a080b3f3ed2f2822673f3118bd3bae081df46a59bfce8","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:10.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /ecb/8f8306425cb6740e78b2802ff5047afa96a8ae096bee393c421cac4924db741c4a080b3f3ed2f2822673f3118bd3bae081df46a59bfce8 HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://j60b.vip\r\nXign: jtav56HKFbpU4mMWIg78klTvK+Z4UEpmVw+NqBZdtihdG4rkGoeoIcfS7QOxq1gqdFwhUKNxos/cMZYmFGkIZw6sQSlSoBxVetgA9BP8mP2b6Qfq29/HFlHS28r3szmcAAuWzu1ubIjHfecpWMH/Sr6HwWay8F4FgKDa84dj2n4=\r\ntimestamp: 1779075310788\r\nsign: n2c6h5u2b2m3u239\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: smyyMeiMxkzpdrMtttRwEjkCEtmyZiYf\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:11 GMT\r\ncontent-type: application/json\r\nexpires: Mon, 18 May 2026 03:38:11 GMT\r\ncache-control: public, max-age=180, s-maxage=180, must-revalidate, stale-while-revalidate=30\r\nx-xss-protection: 1; mode=block\r\npragma: public\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccess-control-allow-origin: *\r\nx-custom-check: true, true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075311=otBySF54JmNJLMXkVA/H10lJSqzRBj+OGB336ZjXyePBN6BEB2725pj8zomjkW+QkHCvc9e0drIdGflTjqRucFVxVWY16YnZBryYQeHUsgZGzWlvBxW9G8IKiQzo+C9nJu5rQxo/UV8BRpn3WWoq3pYNx+ktLkdgb3Tv3yTkiOGyFdKwPWGGdKK3LAW75/Au\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926e5a64a26\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"aa1fe36cc499baa3fbdc7ab9bda7432f","sha1":"201b0fc1c4c699f3538c8e3992ec08ecd2f3acb3","sha256":"d509d9e26b3c3a371856286d14bcdd4f17125a10d8ee40e119fdecaf964fb478","sha512":"2dff3b34740cc9d3690f596673675516493472f5ad4bbd3536b5b1b18922543771be73e01051874bc7039aef9461cedb841f0cbe4945118bdea5773a4b3f7a55","ssdeep":"","tlshash":"03b012a2d5a309ed9644713104305c414be022ccc9bcf858c7bc4d2b45650210494105","first_seen":"2025-08-09T20:01:46.169117Z","last_seen":"2026-05-18T03:40:23.918785Z","times_seen":1509,"resource_available":false,"data":null}},"time_used":2235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/13575.1777369843125.cda1d494.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/13575.1777369843125.cda1d494.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:49 GMT\r\netag: W/\"69f08425-2f97a\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b54249ce\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"eda98cc14e8c025a359a009951750a20","sha1":"b54dc08d49209bb6953641b57cead1ec1e92d823","sha256":"636dbf0f9dbb30ed3d15582a38bbc4c1857fd1affbe8be077182666b906e7f3e","sha512":"fc6837e6c1ebb1b97998b81be6fab0614b1d30dd0494527bb2fdcaa139d3d26a16798468a172b13ad982cb3ac0651e22ed1d8af5ff62fc501babf9c04c104659","ssdeep":"1536:X17BBHFeKRKp+3ELSPtj6x2DgJoG7PIDmj9VA+s69JAFdE6WIzl+Ik1+eXMa7a4H:hjHoKRKphCnDgJoec+IDWIzls+7Xr0X7","tlshash":"4a141a84764170b8c396a165322f601ae22f789650dd9c24f3789aa47f7470df26fabc","first_seen":"2026-04-29T03:41:13.356911Z","last_seen":"2026-05-18T03:40:23.934567Z","times_seen":111,"resource_available":true,"data":null}},"time_used":2383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/css/index-399e2569.1777369843125.a7b0b4f4.css","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /css/index-399e2569.1777369843125.a7b0b4f4.css HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-faee\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b3ef49c5\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (64238), with no line terminators","md5":"1f30d2cd291b70a1848607e3460d9278","sha1":"e91e48518ec94fcaacf418789927f34d7527dc99","sha256":"8ce1851c7bd6e7db80ee5ee8da7a0c808f29756dda3c941bb3811dc3bd3e5afd","sha512":"3cf09b1afc740c4a219a45a233489d76587ec8bd80a57c52ab133f33fdffa8a3fe35a0a27e386270ebeaa9e86d156897e44733b8eb83ee6935fe67749c30cd0f","ssdeep":"768:E0ouVbMisnf7X8vtr9UL5srs7hAqpLe20TCKiNkZICSA2ohGyHukQ9aaV+TJtU+G:HoGws9isrQAqVe6KekWRlkQ9hf+Pe","tlshash":"c6538d3123e0286ee27b6b16ec51e659352b8602f127625af703362fc1d72f5c67b742","first_seen":"2026-03-20T12:57:26.768432Z","last_seen":"2026-05-18T03:40:23.987886Z","times_seen":229,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/ecb/8f8306425ab46d0221b2c56ef50f72e487d5bb0255ee7333091abb7c08c465094a574c3c12d0e1812241fe43c0d5f0ea88d857f698a4fd081b","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:10.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /ecb/8f8306425ab46d0221b2c56ef50f72e487d5bb0255ee7333091abb7c08c465094a574c3c12d0e1812241fe43c0d5f0ea88d857f698a4fd081b HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://j60b.vip\r\nXign: GmEqTMIWPpsITTpsJAv4g27fawtb65cAk856lij8U57QOvPgXdMg9hFyuF2cTyNSARrrFi0LuRpDkZQaoYuRdLF+SOj4r85GsV7R1/f1NUngm8CYFiX0E9SUmM/Xj3prytWMxsDNYJljn21lX42zd9uLmbJQJPqPQpfYFuvdJ+g=\r\ntimestamp: 1779075310788\r\nsign: o1g2e375e657556t\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: smyyMeiMxkzpdrMtttRwEjkCEtmyZiYf\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:11 GMT\r\ncontent-type: application/json\r\nexpires: Mon, 18 May 2026 03:40:11 GMT\r\ncache-control: public, max-age=300, s-maxage=300, must-revalidate, stale-while-revalidate=30\r\nx-xss-protection: 1; mode=block\r\npragma: public\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccess-control-allow-origin: *\r\nx-custom-check: true, true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075311=otBySF54JmNJLMXkVA/H10lJSqzRBj+OGB336ZjXyePBN6BEB2725pj8zomjkW+QkHCvc9e0drIdGflTjqRucFVxVWY16YnZBryYQeHUsgZGzWlvBxW9G8IKiQzo+C9nJu5rQxo/UV8BRpn3WWoq3pYNx+ktLkdgb3Tv3yTkiOGyFdKwPWGGdKK3LAW75/Au\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926e5964a21\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34099,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"28b7c1718f2cd4a4319d83b20eebfb38","sha1":"60aff7f2d658244cdcc6d0334999c2edc2288880","sha256":"a75368e0591bc0ca84fe461feb24d675f5d9c8c7f7814dfb67d3b320760046d4","sha512":"da26fd2fb57eba94557f7601730ad082e7de31ef8a3374c815d0a3151b6b815d3ffa901484505cf291aed561ecfc0b2897211d1ac90f799516609e29e4b9ec10","ssdeep":"1536:OM8TTLv9Y/dpJ06YCnAJ+V2o+kV4uPMzD5SNrv:x8TTLa/RIYAUVwe4u0zl8","tlshash":"3d33d0140301f3f0d3efa4fe2d1656c016259a92e6a6fe61c676c76039eb01ea39f4d2","first_seen":"2026-05-18T03:35:30.450409Z","last_seen":"2026-05-18T03:35:30.450409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/api/tenant/domain/list","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:10.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /api/tenant/domain/list HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nx-request-source: https://j60b.vip\r\nXign: ViF458Lr8MbmDC7hQwqAzC8W2GLMtl9DzNCKTHoeAIMJIs/TOkU34aGAE6TxYHbgD9LyOfcFEPHDaq8b6OJrGQOCzIFc9I9W+kbPiRLhwurItAvJCS/G5NoLz3HpC6PqucpXeM304VFaIqjkH51257DYK22uCHBsrOAPraTjuoA=\r\ntimestamp: 1779075310785\r\nsign: 755j6e3u70665f10\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: smyyMeiMxkzpdrMtttRwEjkCEtmyZiYf\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:11 GMT\r\ncontent-type: application/json\r\nexpires: Mon, 18 May 2026 03:45:11 GMT\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nx-xss-protection: 1; mode=block\r\npragma: public\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075311=otBySF54JmNJLMXkVA/H10lJSqzRBj+OGB336ZjXyePBN6BEB2725pj8zomjkW+QkHCvc9e0drIdGflTjqRucFVxVWY16YnZBryYQeHUsgZGzWlvBxW9G8IKiQzo+C9nJu5rQxo/UV8BRpn3WWoq3pYNx+ktLkdgb3Tv3yTkiOGyFdKwPWGGdKK3LAW75/Au\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926e5a54a25\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1108,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5d9e96bd132a2c24281ae50f2b09efe4","sha1":"503ea18100d0f1573baa195933355a1372e93841","sha256":"7f205b18b5deaae96622989dbc8ad73999a9616e96ef26d909f19525deadb328","sha512":"ab5a589dc81944d2fe05d656777e9e490d42a2fd68c7e577387cfdd47c9b0c5276ca2f91a3868407c373e500d00bb5360a5ae035c7c0cb1addf47f20755a268b","ssdeep":"","tlshash":"fb11c6101c6f12c8d6e8d29263503345388d8b76056db91b69d6b74fae0583a32120a4","first_seen":"2025-08-29T11:05:53.144028Z","last_seen":"2026-05-18T03:40:23.98938Z","times_seen":1368,"resource_available":false,"data":null}},"time_used":2235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/config/telegram.js?t=1779075298050","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /config/telegram.js?t=1779075298050 HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:49 GMT\r\netag: W/\"69f08425-1c896\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b54249d3\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116886,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (483)","md5":"4ef2154bcfb8399f256c2da15a4cb409","sha1":"e0f8f5578b2e0773ec1d79bb1cec54e1f5d6373d","sha256":"73fa4926373755b52fecfdf3145a0c9953c08af374ea69dda46fe2b3b9ddb022","sha512":"8b64643161386bdefbb7eab04416e78e5e183c50acba7b25b146aa6e733744a326566a01eb7eabb1a0a3f5b87ac8461a7ab3b9ad1c44de37ecea25af09e3eb41","ssdeep":"1536:WK4KZK+Klt3LbbdS4V+vO14KtA9phXTQ+fcZl8LDh7j8d3K+V4WMrnf/NunqxF00:Wj+dgdLbbdSA+1XTQRZ1jSBl","tlshash":"14b31c4c5cf3216285a7b1be8b9f925072759893304def203c4d9ba45f98d3c53eaad8","first_seen":"2025-05-31T08:16:48.368096Z","last_seen":"2026-05-18T03:40:23.955355Z","times_seen":878,"resource_available":true,"data":null}},"time_used":2376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/home.1777369843125.1e63fe95.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:03.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/home.1777369843125.1e63fe95.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-2f453\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075303=4xz2fc7SvzFESJhoEtBShGmhCb3XGApf2xiif3wjh1MHF+bDp2KtRZ838N+eFIqbZqDHdH1luif86XxoQ3sKmblTA090Dm8ny7DwcjdYMcBJO43kiyNmcXVHRJvgRuIHOh9/J3BDM7MiFkwU1vSu/+tN5qczZqcu2lTRKdnE011/2+DC4O0HMR15iTU1KPrp\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926c76349dc\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":193619,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64126), with no line terminators","md5":"ac7180fee301b4b62de750803a778412","sha1":"b70eb6223cbd147c8dc23df4d073e9dc641927d5","sha256":"25b167f413e31989cc5856e80f67902b0e84efed7087cea17ec1b5b0dcda5b68","sha512":"4fe2d812d406c786a2204a4f4b370217f4cccb1bf61cbea821e648667325ad32057d1aa30504952de28142b1f4fa0c523f55298834cb567631cc2b7cd37355b6","ssdeep":"3072:f+YNGVSIMctwiYJBuopQuFdBlGLuJuhxffj7TEOiGRlp:f+YNGVSIMctwi+PjFwzffjAGHp","tlshash":"b5140880b5f0e275576fd2b7d7371024b2271686d0ccac60e1f66b187e28796b236db8","first_seen":"2026-04-29T03:41:13.306134Z","last_seen":"2026-05-18T03:40:23.980002Z","times_seen":107,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/35142.1777369843125.e8dc7ade.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:04.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/35142.1777369843125.e8dc7ade.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-5350b\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075305=D9+JjqhIZ2X+ST3Icdn/Iem1m+VWwQwtrW55JeuwwcGHW2zCIGJ+G+LNb/0vmWvKPso+LW8thL9+x9xpGyvaXmcomvfn9UM80cRM1tvQHzoLYTAj0kTeRJj/0ykQN0tQF+aKpLHxMF/PcTt37wEDYmMsGjykRQd4ZTe6Rf+4OAnH21/1468QyyP69oZUkLIb\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926cd5349ef\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":341259,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64890), with no line terminators","md5":"a5d97dbf77d44812ad4ab30e375fb143","sha1":"6bcf1ac84a9018203641f99e45abae922aef3e4c","sha256":"ca2b371b1bcef9e7641c24d421d68c7a3cef405f36a13597d724987a369a2727","sha512":"56bd2311e73f8ed688d893ac0c7d29d02bcda91e939a50f8cfc9bbe4435125c878b58ef47519618ca42aad8393b248455b87940c32121235c5850777aeac7b6d","ssdeep":"6144:xfhhkpltRm4iyveBHlBfb0wv1e7Ancbt83i2UfIL5LoSltLFe/fwwutUcAct37/k:xfhhkplTm4iyv0HlBfb0wv1aAncbt83s","tlshash":"26743c84b690b17483af86fb72169194d25e0e9460ccace4f27e6e40bf11746f87b5ec","first_seen":"2026-04-29T03:41:13.452388Z","last_seen":"2026-05-18T03:40:23.941613Z","times_seen":95,"resource_available":true,"data":null}},"time_used":5192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/7653.1777369843125.5eafcc69.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:04.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/7653.1777369843125.5eafcc69.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-5dd\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075305=D9+JjqhIZ2X+ST3Icdn/Iem1m+VWwQwtrW55JeuwwcGHW2zCIGJ+G+LNb/0vmWvKPso+LW8thL9+x9xpGyvaXmcomvfn9UM80cRM1tvQHzoLYTAj0kTeRJj/0ykQN0tQF+aKpLHxMF/PcTt37wEDYmMsGjykRQd4ZTe6Rf+4OAnH21/1468QyyP69oZUkLIb\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926cd5449f1\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1501), with no line terminators","md5":"4849391ecd3ae7038c8eca5da5af6cd4","sha1":"6316de5585ce9c3c90e92da7f445df0f1eb06f39","sha256":"7ace68dcf17129b57d79ff5a5ce030178b60d463fa0b0d1027ff5a62981ae2ef","sha512":"04bf30f23c9fc4ee7df1d106f541932dec50cf5794d313087378b16ed5430d29f75a5891abf4e84657525774f2ee231ac62d9e7640000390ee29a08bf23fbae4","ssdeep":"","tlshash":"47310e98b6a171b243af5af98f3f168bf16794c064edb094d096e2e07cb420c4937d29","first_seen":"2026-03-20T12:57:26.686565Z","last_seen":"2026-05-18T03:40:23.988625Z","times_seen":220,"resource_available":true,"data":null}},"time_used":5191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/css/chunk-common.1777369843125.32ab7c45.css","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /css/chunk-common.1777369843125.32ab7c45.css HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-33e9\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b3ea49c3\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13289,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13289), with no line terminators","md5":"c564fca03e3163e6f230cfce16abd0b7","sha1":"f711dd11fd523e3299c13d9ed37d504671ed824d","sha256":"802bcd434c500feaf5a28cbd6adac354ef122e595965c6f9c440ecfd987d1cb6","sha512":"12d14dbdf4f1c1c446aceb866146eff40a66c77f74b8f331d3e9c4fc7c3f01c849b051a31020b2e2b5134fc2c1dd5c807f9cc398eec91edbdd5c7b1d95691984","ssdeep":"192:4dQK/X4cBY4mZGX1lsUTLA7gYEbz/i//LN4hHSQZA2VxM2XwKjv0:M8oTGEbz/i//LihHBrxP0","tlshash":"c452b731d634b53ce57be226f9d09adc6024d417e2730baeea653b3ac5ca4d215332c8","first_seen":"2026-04-29T03:41:13.417048Z","last_seen":"2026-05-18T03:40:23.987043Z","times_seen":111,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:10.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://j60b.vip\r\nXign: gTUERW5Sf9YA1aluWPLKoisMNWMnZduMeN+TlyiO1IEwQg1ghdMlb3Z+WZb22KCmALtVt2eZk7fAaLP2t5brC/7V7FrJj3iv+GybnPaJQ3mwPtQoWkJ9DYt8Pam9DLsZ4X4HVgKHsCCnsla7YS9Hzazy9VEPJdW+BfKOn/Q5sps=\r\ntimestamp: 1779075310788\r\nsign: b517979f4m3c6t5u\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: smyyMeiMxkzpdrMtttRwEjkCEtmyZiYf\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:11 GMT\r\ncontent-type: application/json\r\nexpires: Mon, 18 May 2026 03:45:11 GMT\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nx-xss-protection: 1; mode=block\r\npragma: public\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccess-control-allow-origin: *\r\nx-custom-check: true, true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075311=otBySF54JmNJLMXkVA/H10lJSqzRBj+OGB336ZjXyePBN6BEB2725pj8zomjkW+QkHCvc9e0drIdGflTjqRucFVxVWY16YnZBryYQeHUsgZGzWlvBxW9G8IKiQzo+C9nJu5rQxo/UV8BRpn3WWoq3pYNx+ktLkdgb3Tv3yTkiOGyFdKwPWGGdKK3LAW75/Au\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926e5934a20\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7331,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"b2560c08eb15697f221b306b830c9593","sha1":"7a93a05f699e260ff551879249154889be013954","sha256":"8c670c2cbd7da4a55c12a0a20945d3f9140bb2723762853cb22c83ae28f70619","sha512":"1ebc341f4866ed79d31402cc4194b6998b4b54304d11ba647e3666cfa0b680fa3f0d9e50987366d9d905ba295baf90b8d3cf7dbd03538e6bc1da370763e43935","ssdeep":"192:VNXaHYhiBNWN/DDxL4ji0SGv3fY5rocjrLI4irw9bdWanVAa7aqr:vqHY0Nk/DDr0SGv3fY5rTHw4dWanVT7P","tlshash":"5532be570b12e3a0669cd4f8a5136cc11a9b4acc80bdabd5d274c4e02fde7d075cc8b6","first_seen":"2026-05-18T03:35:30.45667Z","last_seen":"2026-05-18T03:35:30.45667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/45540.1777369843125.8e1e0acf.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/45540.1777369843125.8e1e0acf.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:49 GMT\r\netag: W/\"69f08425-37ff6\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b54249cd\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":229366,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a0e497c34e367322be5d24c3b27d661c","sha1":"05738c9aad3a5d894b6d49780014a52200ef950d","sha256":"073a44ee1f965bd3739f07604455eb8940250c073f060303550cdd02ba87109b","sha512":"ea91edbfdf72b73e3fddb4a652393cfd4c1be31242b51f7caa28ee35cf3f66eb42bafff62ffacc3a2b89cdee253e84e2d8ec5e5c5bbc9832053bd5c00df77b3e","ssdeep":"6144:JYD4wFsYiSGfKnCKPP6Xm9sm3MCln1OSgpozfEe5a:JYD4wFsYiSAKNH3TY5","tlshash":"6024e894f294f1be075fc1f1d23b501af35b5e6120cc9ca0d296e6942e20b49da77eac","first_seen":"2026-04-29T03:41:13.329661Z","last_seen":"2026-05-18T03:40:23.917336Z","times_seen":111,"resource_available":true,"data":null}},"time_used":2382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/index-a3dad144.1777369843125.66a58dcd.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/index-a3dad144.1777369843125.66a58dcd.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-56b20\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b54249d1\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64580), with no line terminators","md5":"aa47bc946b9df160fc4c9d0ccd247727","sha1":"2b81fb3062bb6d32ce5cb43811300ec95a0f3cc1","sha256":"907a77df793605acb0f292d7b450584a9f7cc65e76b8ed19c7ed0b72e3a9f4cf","sha512":"73daf5dd0d9b5f8325bc9fd63618ff31bc76dbcd70b12961aa5d9cdac2b0b570fb832a3815c4cdeb269ed90bd5613e681da42d6b0e668303a7660c6017ee0f83","ssdeep":"6144:DybhFOufhkHLHEY/TtesplVyrYlRlNsmq9DG:+zBuHLHEY/TtesplVyesp96","tlshash":"05742c90f76ce1bd874e55fe7a3290a4902c1b41b0c89e59d29d2944fe6b385feb04bc","first_seen":"2026-04-29T03:41:13.301567Z","last_seen":"2026-05-18T03:40:23.92115Z","times_seen":108,"resource_available":true,"data":null}},"time_used":2376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/83749.1777369843125.7bad5eaf.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:04.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/83749.1777369843125.7bad5eaf.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-1641f\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075305=D9+JjqhIZ2X+ST3Icdn/Iem1m+VWwQwtrW55JeuwwcGHW2zCIGJ+G+LNb/0vmWvKPso+LW8thL9+x9xpGyvaXmcomvfn9UM80cRM1tvQHzoLYTAj0kTeRJj/0ykQN0tQF+aKpLHxMF/PcTt37wEDYmMsGjykRQd4ZTe6Rf+4OAnH21/1468QyyP69oZUkLIb\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926cdea49f3\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91167,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64072), with no line terminators","md5":"d036e00b216c6886ee096346a4aa7d9c","sha1":"8b6cdea36134802a22d5ab4009f69036ef63dd40","sha256":"444030e40d34fa938300dd2cc7b218f3fe47f6a865afd399ea5c1cd5dddae433","sha512":"bab25e53e886cf51cb47125cbb1582da65677fbafa057cc9f770b7a7889ea3bc8a59f60574c16404fba3d974b876f655642a1708a9beedb20b9b47d1b5ba68b0","ssdeep":"1536:lcK/KnqHB3vmeLUw/A6+GplTwsCNgOX8JwTl0sI5pQiVFFsdt+HmQ:rB3vzowo6XTIgOXawTl0sgQi2tkr","tlshash":"6a93e7c4b5f4f5f9279ec5a297364478b02127c5a0c8ace0d2e96e147f1ab92b0758fc","first_seen":"2026-04-29T03:41:13.335994Z","last_seen":"2026-05-18T03:40:24.021973Z","times_seen":99,"resource_available":true,"data":null}},"time_used":5060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5060,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/img/no_data.02e9590c.png","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:04.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /img/no_data.02e9590c.png HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T05:40:50.377788Z","times_seen":15370036,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/configPage.js?v=4/28/2026,%2017:55:48","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /configPage.js?v=4/28/2026,%2017:55:48 HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 949\r\nlast-modified: Tue, 28 Apr 2026 09:55:57 GMT\r\netag: \"69f0842d-3b5\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b3e649c1\r\nx-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":949,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (917), with no line terminators","md5":"e6aa74bb352ef198ba3e1c9a4b01b014","sha1":"2ea8bd6b5045475a36432f7665a129728e822d9e","sha256":"73828e873c0b6e847b37d78941ca436247471dfc90a12f743964f869f75abd5c","sha512":"2faaf24fdf1e4da637af8e9f82d1778bf061b00752dfca0c8f73432ba236a7b69410a7ad2a73727bc83e6cd631fd6555c3cc0d9d3a5d8a7f81818dd66566011f","ssdeep":"","tlshash":"be117aaf57444dffcf1d7e00a08b0a5ea8bc61d261889d4da8e9cf29e1c99002378978","first_seen":"2025-09-04T00:49:32.949926Z","last_seen":"2026-05-18T03:40:23.945625Z","times_seen":1448,"resource_available":true,"data":null}},"time_used":1096,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/21954.1777369843125.57c97863.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:03.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/21954.1777369843125.57c97863.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-a3f0\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075303=4xz2fc7SvzFESJhoEtBShGmhCb3XGApf2xiif3wjh1MHF+bDp2KtRZ838N+eFIqbZqDHdH1luif86XxoQ3sKmblTA090Dm8ny7DwcjdYMcBJO43kiyNmcXVHRJvgRuIHOh9/J3BDM7MiFkwU1vSu/+tN5qczZqcu2lTRKdnE011/2+DC4O0HMR15iTU1KPrp\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926c73049da\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41968,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41968), with no line terminators","md5":"0e41dd7729067b884faab37fcd9af417","sha1":"11acbef297a8f924deae47393678fb42c36ece7e","sha256":"9535e9e039663a829c5e5ffb31879f836c96c5e1f58306318b45a64f4a6687ea","sha512":"228b5a935e11e121070f4a6710af8ed39e21fe53a228c99bb4befc116c54f37693f2c9e5b08d202dd5b8375b84c4fbf63918cf013f6af5d4f71464f93524d3c3","ssdeep":"768:QPhaSfmzKrMdvf0eMQ/96loumY1PI1yBK9LudEz+yUy51y9y0yk6Dio+ILqpTeY:/81R6Ipyk6o","tlshash":"a7132088fac2b06dd3eb7330857f505ae66a1dc0668c5438e260d6917e7198dc1fb5f8","first_seen":"2026-03-18T07:07:19.558046Z","last_seen":"2026-05-18T03:40:23.921877Z","times_seen":116,"resource_available":true,"data":null}},"time_used":805,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":805,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/ecb/8f8306425eba6e0167bcdb25a31b67ec8f","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:10.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /ecb/8f8306425eba6e0167bcdb25a31b67ec8f HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://j60b.vip\r\nXign: 1jF8qst4igrApqA+nQrVKP84xC5Ab4s0o/H9a0BAamJ33NiV5u0tzGV7yw5/YYlnHOjFs+9zxpEr3/chXomp/hoY9wgNNjpUsKyRsAJoGrndGsQugTUxvKt19vt4X3bmUarUghidAQleT514v6plFgwfOt0XqRm2zz+1wYPqvy0=\r\ntimestamp: 1779075310788\r\nsign: 15e6e4b4l286s6t5\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: smyyMeiMxkzpdrMtttRwEjkCEtmyZiYf\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:11 GMT\r\ncontent-type: application/json\r\nexpires: Mon, 18 May 2026 03:38:11 GMT\r\ncache-control: public, max-age=180, s-maxage=180, must-revalidate, stale-while-revalidate=30\r\nx-xss-protection: 1; mode=block\r\npragma: public\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccess-control-allow-origin: *\r\nx-custom-check: true, true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075311=otBySF54JmNJLMXkVA/H10lJSqzRBj+OGB336ZjXyePBN6BEB2725pj8zomjkW+QkHCvc9e0drIdGflTjqRucFVxVWY16YnZBryYQeHUsgZGzWlvBxW9G8IKiQzo+C9nJu5rQxo/UV8BRpn3WWoq3pYNx+ktLkdgb3Tv3yTkiOGyFdKwPWGGdKK3LAW75/Au\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926e58b4a1f\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3849,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"63ce5b8e8bb69017376225df60182973","sha1":"817b80b87b867d8323f013415869d816354f8eb3","sha256":"f7d1c87c88b9aaede88c8ca552e0fe20345e8dd13218332ff8c43cc05c3c6f28","sha512":"9498b59fc96468364afb09db4f1be8eec263c64fc369b7ae7b8373cd85c8f54da86a3014bb7a8d1dea390623e8a82f5c0ffba6253e12e6821167b2b911df7303","ssdeep":"96:eOGS7hTEAzTPZRNe4vK2Ha1A5Zfzg4j0RdyQ9LG6jhOQnemJmVT12FqhuYRTYx:VP7SaJe4nHKEzgvR0QoK+fFpTYx","tlshash":"b3c17e96a727af20e1023cf82833d6d11ec26f54fbd11944e8352a952ef455f5b9d302","first_seen":"2026-05-15T23:42:44.616346Z","last_seen":"2026-05-18T03:40:23.923349Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/22872.1777369843125.dbee35b5.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/22872.1777369843125.dbee35b5.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-269c0\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b54249d0\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":158144,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e916996ddfb5f1c6e2f6cbf5a87b5565","sha1":"7b3812a3cf8758cd6ce5a442d899048e27d1790b","sha256":"a50d9c1f28c0948f0d468428aec46c5d300a84fb71ce27e6790ca8e0f40a955a","sha512":"c5fe69584b305477ce1b4bb12d6a9b4ce2c73ddeb07c133f14d7ec7782b743769b4f48824f326be1ea00c53835dda635e0011b055c6af3ad0876a0344d6be794","ssdeep":"3072:PHW7tB4Vgj5tNlxyUYwOW1YegxYffj7TEOiG1Zl+DJVkzEcx1nKs:PHW7tBwgttXxyUYwOW5ffjAG1T+DJVkV","tlshash":"76f30bd4f2c070f6475f85f2a2275065b26f4d92318c98b0e15ba6547f21b48c7abeec","first_seen":"2026-04-29T03:41:13.30041Z","last_seen":"2026-05-18T03:40:24.032053Z","times_seen":109,"resource_available":true,"data":null}},"time_used":2383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:10.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://j60b.vip\r\nXign: Lb7OH6F5Azq2ezwFFDP4nBrRzfevaqCpx5IED0RNm7S8e+570AMzCb9x1wAdgqvJbHI6nQreiVkyUBfIywV7jVXp+toBKIzFtV2IoUlXlElkNIs7qNuXeWnqXfc379F7SvzdanZMT8fuGCohtzrPZjDJ4yYZvjWlZTmosKQsRXI=\r\ntimestamp: 1779075310788\r\nsign: 1e2g695e7e2e7o1f\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: smyyMeiMxkzpdrMtttRwEjkCEtmyZiYf\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:11 GMT\r\ncontent-type: application/json\r\nexpires: Mon, 18 May 2026 03:45:11 GMT\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nx-xss-protection: 1; mode=block\r\npragma: public\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccess-control-allow-origin: *\r\nx-custom-check: true, true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075311=otBySF54JmNJLMXkVA/H10lJSqzRBj+OGB336ZjXyePBN6BEB2725pj8zomjkW+QkHCvc9e0drIdGflTjqRucFVxVWY16YnZBryYQeHUsgZGzWlvBxW9G8IKiQzo+C9nJu5rQxo/UV8BRpn3WWoq3pYNx+ktLkdgb3Tv3yTkiOGyFdKwPWGGdKK3LAW75/Au\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926e5a64a27\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7331,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"b2560c08eb15697f221b306b830c9593","sha1":"7a93a05f699e260ff551879249154889be013954","sha256":"8c670c2cbd7da4a55c12a0a20945d3f9140bb2723762853cb22c83ae28f70619","sha512":"1ebc341f4866ed79d31402cc4194b6998b4b54304d11ba647e3666cfa0b680fa3f0d9e50987366d9d905ba295baf90b8d3cf7dbd03538e6bc1da370763e43935","ssdeep":"192:VNXaHYhiBNWN/DDxL4ji0SGv3fY5rocjrLI4irw9bdWanVAa7aqr:vqHY0Nk/DDr0SGv3fY5rTHw4dWanVT7P","tlshash":"5532be570b12e3a0669cd4f8a5136cc11a9b4acc80bdabd5d274c4e02fde7d075cc8b6","first_seen":"2026-05-18T03:35:30.45667Z","last_seen":"2026-05-18T03:35:30.45667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/api/sport/match/list?sportId=1\u0026client=web","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:10.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /api/sport/match/list?sportId=1\u0026client=web HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nx-request-source: https://j60b.vip\r\nXign: CabU1ge4NFGMpdJVoKYYVffEVAa/vhYvxvZmFNykarv7K2ZJYNd15BtcW6BpUdKZN6X66nqvpQSULj0dt2mr2WNMLkfTo7H4vHEFb4amfNTmO3CPi5xy3frT1JjXuwYPsNMFeAlaYfSowq9uSFi2fYySCsBoAGsPM7O+ovB+WPE=\r\ntimestamp: 1779075310784\r\nsign: j62145fa105i1t1i\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: MbiAb4k7kFiimyB8tHT3c78ARbdfWzZM\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:11 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, no-store, max-age=0\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\nserver: Nginx\r\nl-safe: 1779075311=otBySF54JmNJLMXkVA/H10lJSqzRBj+OGB336ZjXyePBN6BEB2725pj8zomjkW+QkHCvc9e0drIdGflTjqRucFVxVWY16YnZBryYQeHUsgZGzWlvBxW9G8IKiQzo+C9nJu5rQxo/UV8BRpn3WWoq3pYNx+ktLkdgb3Tv3yTkiOGyFdKwPWGGdKK3LAW75/Au\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926e5a04a23\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1159,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"95aed7bd76dc94057db93d130027f2e4","sha1":"cf001c9c78126f19933dc41b3a258c5e354d814e","sha256":"c41c6277ca6ba3fd06c9292821143fba267268ffa1d54efa5297dd07caa9c460","sha512":"dea4830a1d230dd6e71034fff16f55b2d0df06875cb7e679662573a6bed4c6760451f51ccb6bc05de084eda8fedf264cc37835e953df06639cd20b6a86882885","ssdeep":"","tlshash":"7421ac9352ec2c551b8c21a1ae1e7e09487fba570a9eb6d5ed0e9f0920f03f79500d11","first_seen":"2026-05-18T03:34:24.649712Z","last_seen":"2026-05-18T03:40:23.924977Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/1afa85b9cb1648ba99ec1a2fa69c5a36?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:15.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/1afa85b9cb1648ba99ec1a2fa69c5a36?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 18 May 2026 03:35:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 49713\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 420\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"1afa85b9cb1648ba99ec1a2fa69c5a36\"; filename*=utf-8''1afa85b9cb1648ba99ec1a2fa69c5a36\r\ncontent-md5: YCxwIsnYCCU6Fa1HVkXCNw==\r\ncontent-transfer-encoding: binary\r\netag: \"FjvhSMngRzctbHtgSPsnYED24Qbs\"\r\nlast-modified: Sun, 17 May 2026 22:42:50 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg119;QNM3\r\nx-m-reqid: V1W36ZZ8A\r\nx-qiniu-zone: as0\r\nx-qnm-cache: Hit\r\nx-reqid: 9TsAAAAozOowi7AY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 244 x 179, 8-bit/color RGBA, non-interlaced","md5":"602c7022c9d808253a15ad475645c237","sha1":"3be148c9e047372d6c7b6048fb276040f6e106ec","sha256":"2963689ef824007ea7448ad9d518f19b161ccd68b7c897e3ded03fe19d5f5c73","sha512":"5cdfb2c96ce001080f9a00f96bda1f1b37b02718fff28d7d9700988c54669b79b9c4ab46570652dd898dc827bbb1878d876acd12f2e16a0710f34e3ce87f3f21","ssdeep":"768:TEKzAwtx6aQ+TwWuRwCFyZxuJMr/hgRfF55z3/wZJ8Zpa8AkRACT543n:Td1/c+buRwCFyTuKhgpb5zv8H8Pn543","tlshash":"de23e13ce361c30e99b816515ea4c0cdf8a91f40c97391bd5a9c1606e4ee96fe2fd217","first_seen":"2026-05-18T03:34:24.811826Z","last_seen":"2026-05-18T03:40:24.016256Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1816,"timings":{"blocked":536,"dns":0,"connect":247,"send":0,"wait":276,"receive":468,"ssl":285},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.geetest.com/g5/gd.js","fqdn":"static.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"104.17.5.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geetest.com","organization":"Wuhan Jiyi Network Technology Co., Ltd."},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Fri, 19 Dec 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CA:8B:31:34:03:03:4F:25:DE:AF:F1:76:9E:25:19:08:18:0C:04:EA","sha256":"F3:25:0F:0B:68:0B:B5:E2:F6:2A:F2:FE:E9:AA:10:6C:61:1C:7D:A6:FA:3F:D9:45:0F:E6:58:6D:71:F9:2E:2E"}}},"request":{"raw":"GET /g5/gd.js HTTP/1.1\r\nHost: static.geetest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9fd7cf253f6db521-OSL\r\ncf-cache-status: HIT\r\nage: 352838\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: \"7D7AF3F3975E0FB657B71508B79515F9\"\r\nexpires: Tue, 19 May 2026 03:34:58 GMT\r\nlast-modified: Mon, 30 Mar 2026 13:35:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncontent-md5: fXrz85deD7ZXtxUIt5UV+Q==\r\nx-oss-hash-crc64ecma: 275051795077788302\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69CA7DA1318BA43434E50547\r\nx-oss-server-time: 8\r\nx-oss-storage-class: Standard\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21040,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7d7af3f3975e0fb657b71508b79515f9","sha1":"b36988028196a947b1d67af0856a79e6cf054283","sha256":"41cadd609d64b1958d25afc39e73148bf669fd94f48e848dd47494e7de5762b7","sha512":"ed69806d7f263fec8f66cccf0de8757df3b17cad5629c242e1da0d668830870d42951b8a05cb6780ecf8034800313d02531393745209a5aa3e00ac5d936e1bed","ssdeep":"384:oGm+XLBnDztmdGnnsQn4DgIzHilQVdlsGxCnXdPVcVf:dm+7B6gUKMrxCtCd","tlshash":"5d92204e6cf5a0934a43b078c9af6114b538da53041c9d597d8ce3a4ef684389bbafdc","first_seen":"2026-04-05T08:11:55.721652Z","last_seen":"2026-05-18T03:40:23.928451Z","times_seen":216,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":6,"dns":1,"connect":1,"send":0,"wait":14,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/kc523-1/sponsor/sponsor.json?1777369782162","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:04.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor.json?1777369782162 HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:05 GMT\r\ncontent-type: application/json\r\ncontent-length: 646\r\nlast-modified: Sun, 24 Aug 2025 06:03:49 GMT\r\netag: \"68aaab45-286\"\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\nserver: Nginx\r\nl-safe: 1779075305=D9+JjqhIZ2X+ST3Icdn/Iem1m+VWwQwtrW55JeuwwcGHW2zCIGJ+G+LNb/0vmWvKPso+LW8thL9+x9xpGyvaXmcomvfn9UM80cRM1tvQHzoLYTAj0kTeRJj/0ykQN0tQF+aKpLHxMF/PcTt37wEDYmMsGjykRQd4ZTe6Rf+4OAnH21/1468QyyP69oZUkLIb\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926ce8349fb\r\nx-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":646,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"10d2161de8cf99c474812f4c43645a26","sha1":"71884ef7281cdcb5084088f16d4550ce8790e634","sha256":"bb02fd7438bb49dd4decb6f76a71f11e93355332fd9f965d6f9f13bb8175aeca","sha512":"bf0fd1232309fcc5582d5c42644e1c7b4b8d235b1066e988ff55e0dd94a956f89742401f00c2d904359041c8e0c2bac8e9316252fab60db5eb0a3b4c935172f0","ssdeep":"","tlshash":"d8f0f44ad8b25b93211fb57c58cd050470294a8f0eccaac4baac987c4f598ddd1e839e","first_seen":"2023-06-16T04:51:50Z","last_seen":"2026-05-18T03:40:23.928993Z","times_seen":1518,"resource_available":false,"data":null}},"time_used":5423,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4899,"receive":524,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/js/chunk-svg.1777369843125.1e4dfc16.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /js/chunk-svg.1777369843125.1e4dfc16.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-714c8\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b3f049c7\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":464072,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"17dc7d24243be411dfc65e6d3bfc3fed","sha1":"040dff237c788f6720e1e7ad8903f103cb86db73","sha256":"4296d5094a19dae430c40d8315056ffcd226eafe5012f293d988d2b631c682e1","sha512":"742a36b45941527965abaaa6e1443e4668e5af5085a1166b561059df61a9f42f0096cbc9f80dd9cd845cefd166d5d84a4e6282eb16100e078d28e6c0305a6a26","ssdeep":"3072:h8nz2uaLZSZvx6Q/sIPrekK+m36Ua94sRZI7gbpF/:h8nz2uasNxpXPrekK+m36UHsE4pF/","tlshash":"bfa4fcb4c190f4edf704ce196e7c9e1c50321688e0a9e9e52da9fe0d9e85d6b241cdec","first_seen":"2026-04-29T03:41:13.396807Z","last_seen":"2026-05-18T03:40:23.923892Z","times_seen":113,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/fonts/DINPro.9ee75b04.ttf","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:04.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /fonts/DINPro.9ee75b04.ttf HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j60b.vip/css/46431.1777369843125.7dc7cfcf.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:05 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 119892\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: \"69f08424-1d454\"\r\ncache-control: public, max-age=2592000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\nserver: Nginx\r\nl-safe: 1779075305=D9+JjqhIZ2X+ST3Icdn/Iem1m+VWwQwtrW55JeuwwcGHW2zCIGJ+G+LNb/0vmWvKPso+LW8thL9+x9xpGyvaXmcomvfn9UM80cRM1tvQHzoLYTAj0kTeRJj/0ykQN0tQF+aKpLHxMF/PcTt37wEDYmMsGjykRQd4ZTe6Rf+4OAnH21/1468QyyP69oZUkLIb\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926ce8c4a0f\r\nx-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119892,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", 30 names, Macintosh, 2005 Albert-Jan Pool published by FSI FontShop International GmbHDIN Pro RegularRegularAlbert-Ja","md5":"028cefac160ed3b006f47106fbc68d1c","sha1":"efcecac09684435facd7397e4f6163a5069802c2","sha256":"fb841a09a82787982ad1774bdeb45e8e06ff4909161a9ce33fd42f8822c5ddc3","sha512":"3a5a284d0c4da6593b857ba785a4ba7d5f2e2b73d22a2ef25435b9558063d2486228d76a3cd5d3a59b5abe4c0da696a75373111b3569a94a9dea1516cf16091f","ssdeep":"3072:YhtN/CZnt1tbtKtHtFNgz1QZt0tbt2ktwtNstAtqNaEctWpy8TLtsIb66AUeo:YhtNGnt1tbtKtHt7t0tbtxtwtNstAtqV","tlshash":"5ac308c153e8fa4ad83996388511c7434226ff2de65d4f36ffd94d8c688e8e9064e6e0","first_seen":"2023-05-08T18:58:40Z","last_seen":"2026-05-18T03:40:24.007503Z","times_seen":3319,"resource_available":false,"data":null}},"time_used":7097,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4839,"receive":2258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/ecb/8f8306425fb46e096ba9db3ab31b67b681fbb31575ff397b0117","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:10.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /ecb/8f8306425fb46e096ba9db3ab31b67b681fbb31575ff397b0117 HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://j60b.vip\r\nXign: AZExpJMl+3Je2Bn1NliSGVmXRKRJI/6qmopR7gzmeX/KxRTn2+rNHZ7IPktzezQxgCWPyXScyKGrrrD8AbM6mFxKPD2SVdjx/mOt65DxcxKS3VLnpAXeGBkdpkyWAdYvV1i15vNPBQipkLb7x7DVXJ7DwSW4iD8EIZConi3rqJI=\r\ntimestamp: 1779075310788\r\nsign: 6u2f754c6v124a2s\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: smyyMeiMxkzpdrMtttRwEjkCEtmyZiYf\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:11 GMT\r\ncontent-type: application/json\r\nexpires: Mon, 18 May 2026 03:45:11 GMT\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nx-xss-protection: 1; mode=block\r\npragma: public\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccess-control-allow-origin: *\r\nx-custom-check: true, true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075311=otBySF54JmNJLMXkVA/H10lJSqzRBj+OGB336ZjXyePBN6BEB2725pj8zomjkW+QkHCvc9e0drIdGflTjqRucFVxVWY16YnZBryYQeHUsgZGzWlvBxW9G8IKiQzo+C9nJu5rQxo/UV8BRpn3WWoq3pYNx+ktLkdgb3Tv3yTkiOGyFdKwPWGGdKK3LAW75/Au\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926e59c4a22\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2132,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"509fbbdd85ebe3673739e23e98219f64","sha1":"89dfea4282cfc752c2464d516dcb8f220aeb27e2","sha256":"0e45536da716b702f638f5eac86cdfe2b73bcd4a05d25aa3579e3e1e62c31adb","sha512":"cd71d72fbc95beb33e604ab17fa688a1f365f0c5c05382bc59cd10c4c7252f7f40162bfd4a33e2c4870874a2a09b41ba8c4a35db5e965464c2592a5daa02afe8","ssdeep":"","tlshash":"ea613c176a9da305de1a8e71d8738dad2d1cc319775df8f2c5905f2086d734270ad240","first_seen":"2026-05-18T03:35:30.467791Z","last_seen":"2026-05-18T03:35:30.467791Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/config/initGeetest4.js","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j60b.vip/","date":"2026-05-18T03:34:58.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /config/initGeetest4.js HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:34:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 09:55:49 GMT\r\netag: W/\"69f08425-3a7f\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075298=gwQPycnKKYvg2VR4pCRSt305edElrSjhVAJaE5/dx+hlP6fgOdn/8YFMUPGA8wCDqdSCpDd2jsF52zkvd3cJgWHzw2rL6bXUZex6IXgj95MXaS2YIr+pStpUz9xd9p13nikndfCg8eABcYInhKqhL46fA5qKOZSEc0k7u5DlLO5Daz71hI0WkdpGp10Xi+u6\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926b3e749c2\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"87855e19802d75b55afa7bcf3af515c1","sha1":"4af373375728a98d623f2299a68a91e150f2672e","sha256":"9ec8a5ef8c8ffe369dd1a5c4730dce6570c0d90955798c0be4ac04ef1c8f4baa","sha512":"3baa6d9e916abfb3d38b7ebb9372c5987e8f10534bb978383751c0094f8f5a3e764f9b8e44a73d9d4871cbaeca7e1939f0ffaf9499af5c4a71f64c3588167d85","ssdeep":"192:23aP8Ha0D+Nu5dq+EvNiqc4K25MB5VYaiQwSL4SScQVy8QRHIsGiz0iX9rES6Myy:2fe61w1iXKb2sMGUI+KQTwwHlB","tlshash":"00621d0d68f764534553b4388b9fb014b5388a53042cde41be9ce354afa843d9bbabdc","first_seen":"2026-02-16T20:32:40.162764Z","last_seen":"2026-05-18T03:40:23.919328Z","times_seen":424,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/css/home.1777369843125.0fc9d8d4.css","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:03.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /css/home.1777369843125.0fc9d8d4.css HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Apr 2026 09:55:48 GMT\r\netag: W/\"69f08424-15b21\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075303=4xz2fc7SvzFESJhoEtBShGmhCb3XGApf2xiif3wjh1MHF+bDp2KtRZ838N+eFIqbZqDHdH1luif86XxoQ3sKmblTA090Dm8ny7DwcjdYMcBJO43kiyNmcXVHRJvgRuIHOh9/J3BDM7MiFkwU1vSu/+tN5qczZqcu2lTRKdnE011/2+DC4O0HMR15iTU1KPrp\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926c76249db\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88865,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"30a5adbe27b21532b2c8f56952780659","sha1":"9145117e5aa3fdd7706b8ee646ad8dcd10fc3c7f","sha256":"37c13454d16818666b7f9cad2fd957546bc4bc5c0ce00a68be778c7ec411dcae","sha512":"823393636732a30be2a0daaedc93f43ec0bacd9cd5f85b238ffeb268af34215887fedef00480f471fadbd2aadd728d697778fee703fc9ae855d7b10d370af38f","ssdeep":"1536:fwRzOcRM7jufawS2d3a8WiLKbzGhbG9gpXdNCN9khb+8J/:fBtuSJwLUK09gEN9khb+y/","tlshash":"99933a76a610253db437ca72aaf06bd8b524c846d7634a3df2527e25cbc71f212363a4","first_seen":"2026-04-29T03:41:13.383588Z","last_seen":"2026-05-18T03:40:23.912003Z","times_seen":107,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":755,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j60b.vip/ecb/8f83064249b06e0660afdb30b60772fdcdfbb3036fb467600d10b16d76dc640e","fqdn":"j60b.vip","domain":"j60b.vip","tld":"vip"},"ip":{"addr":"154.39.104.144","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j60b.vip/","date":"2026-05-18T03:35:10.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"j60b.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:33:46 GMT","end":"Fri, 14 Aug 2026 06:33:45 GMT"},"fingerprint":{"sha1":"D5:83:4F:12:F9:BD:1B:A9:47:40:61:F6:6A:01:A7:B8:93:99:51:CC","sha256":"5C:8D:6F:48:3F:99:DD:E2:9B:27:A7:D2:66:6F:1D:A6:8A:73:E0:0A:6A:73:DE:FE:40:7E:EA:03:62:79:1B:B9"}}},"request":{"raw":"GET /ecb/8f83064249b06e0660afdb30b60772fdcdfbb3036fb467600d10b16d76dc640e HTTP/1.1\r\nHost: j60b.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j60b.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://j60b.vip\r\nXign: HBtBEK4qDqR0i9wCsZiZNZwJ8dlt4R+g+QKHiSqEQ5TrSYsv5oocmBnqtIKLX9U8tvqzVDPZ6fb4GFj7cM3mOesm+7YJOXrj2P1gSLwTPdeb78l+vZmYsR2q5wsbDTRxObww4hjSn0cYuD15s96/0VHiD7+x2MvQtIke99WRuhI=\r\ntimestamp: 1779075310788\r\nsign: 3q4v604q1p3h3s7h\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: smyyMeiMxkzpdrMtttRwEjkCEtmyZiYf\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 03:35:11 GMT\r\ncontent-type: application/json\r\nexpires: Mon, 18 May 2026 03:45:11 GMT\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nx-xss-protection: 1; mode=block\r\npragma: public\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccess-control-allow-origin: *\r\nx-custom-check: true, true\r\ncontent-encoding: gzip\r\nserver: Nginx\r\nl-safe: 1779075311=otBySF54JmNJLMXkVA/H10lJSqzRBj+OGB336ZjXyePBN6BEB2725pj8zomjkW+QkHCvc9e0drIdGflTjqRucFVxVWY16YnZBryYQeHUsgZGzWlvBxW9G8IKiQzo+C9nJu5rQxo/UV8BRpn3WWoq3pYNx+ktLkdgb3Tv3yTkiOGyFdKwPWGGdKK3LAW75/Au\r\nl-via: l1=CJR9oEa4UnlD0OBR\r\nl-version: 1778916737\r\nl-request-id: c5b219e3926e5a24a24\r\nx-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3828,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"d1db36c24e98e5e605478acda65f4b89","sha1":"a8d487a8061f62e93563c5e9f4ab7359f13a824e","sha256":"d5c9befc67dbaa78d66d1503e965e91792df0735647358269ef1768fabcefe47","sha512":"158e0fcc8f616d8fac5196cbadb78cdd643d15858c472e75d4914e57888531ff965709fdb1ca95075a4d27c1028cc308f01789b01293bea7da28ef210e2af124","ssdeep":"96:eOG3iMFIo27z+WuQndcSssJ1OIgOC2Fqk8yxtx0hfchDsjdnr+CXVXdGs3uJ8jc:VL0wJuH5sJeOCUq8xtxX5UNaqdJ3ij","tlshash":"6ec17c08f7a4b7a0ab8653fa74d310a8921f1e7bb64b6d7ac7b0c36b045761a131e304","first_seen":"2026-05-18T03:35:30.470313Z","last_seen":"2026-05-18T03:35:30.470313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"j60b.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"j60b.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}