{"report_id":"0346ca86-ebf0-4592-80dc-8f8415bd3d91","version":0,"status":"done","tags":[],"date":"2026-08-06T23:15:46Z","url":{"schema":"https","addr":"kualianq.com.cn/","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":0,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kualianq.com.cn/","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"title":"快连官网_快连下载_快连官方加速器 Windows/Mac/Android/iOS 客户端","dom":{"size":110330,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"81b774c65ae8eb28dd12463ef525de1a","sha1":"2680156d6dbac3ce7448b0e77d9ae4060fa657a8","sha256":"a6b3418a56462d0738147f96fc8b982d35d74617dd1595376766dd31c14054be","sha512":"f4e9126bb7acec0015d0d7472ccfeeeaceb844193c9e823aeb6cedc7ff4cb862944a504128b3e4f91019470fd9beb66533d7fd775955fbfd28df782dcead8fd2","ssdeep":"1536:vrn7MYIhLDM0iAjCp8XNcW8QNMh8VViKrampBvvj43m8cclkQlilFZclqwAiZAF:vSaKra24Dlq5F","tlshash":"a0b3a59201f319a3584298e05b68970b7e90ea13d917cd147bfc5adccf9ad899e7320f","dom_hash":"domhash6e6c108a323064773476f568aaf9c754","first_seen":"2026-08-06T23:14:27.774274Z","last_seen":"2026-08-06T23:15:52.294702Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kualianq.com.cn/","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":0,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-10T23:15:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":5,"received_data":368885,"sent_data":2785,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":1,"received_data":12724,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"019f6426-9a9e-745d-9277-a52c8316ea50.spst2.com","ip":{"addr":"104.143.37.101","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-04-10","domain_rank":0,"first_seen":"2026-08-06T23:14:19.485813Z","last_seen":"2026-08-06T23:14:19.485814Z","alert_count":0,"request_count":2,"received_data":4388,"sent_data":1055,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-02T22:44:21.067894Z","alert_count":0,"request_count":4,"received_data":341971,"sent_data":2414,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"analytics.ahrefs.com","ip":{"addr":"104.18.39.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-11-25","domain_rank":48245,"first_seen":"2020-05-06T23:41:55Z","last_seen":"2026-08-06T06:20:22.129533Z","alert_count":0,"request_count":2,"received_data":7989,"sent_data":968,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kualianq.com.cn","ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"domain_registered":"2026-07-06","domain_rank":0,"first_seen":"2026-08-06T23:14:19.485181Z","last_seen":"2026-08-06T23:14:19.485181Z","alert_count":84,"request_count":42,"received_data":12117136,"sent_data":21553,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"019f6426-9a9e-745d-9277-a52c8316ea50.spst2.com/ustat.js","fqdn":"019f6426-9a9e-745d-9277-a52c8316ea50.spst2.com","domain":"spst2.com","tld":"com"},"ip":{"addr":"104.143.37.101","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d2dcb33648361b7c292d9d37b3362c1","sha1":"19795ed2eb3c236ecbae624fbed062a2e0fbd30e","sha256":"6ae58a7ab727aa1b6328d0cf5133c17ac6b03df8858eef3d33f12eba5311f837","sha512":"a99244050bfab74c831a87aa94eef4907628de6c9dcd49539a14ff1e06f1912005d347b77e9821554f69bd78bd211f0bdcce5134711062cfb8815669ce975597","ssdeep":"","tlshash":"ba71e8e2369454b263bd4cdee175c690ea3a02c87457a1e0737d0c0a7f4fc82a5a7e98","size":3560,"data":"","first_seen":"2026-06-01T09:16:03.175154Z","last_seen":"2026-08-06T23:15:52.307565Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f94f10c411763738e5faec78952c11e8","sha1":"05ec2c43672de30536da1ffdbf81f85b9d2e0b49","sha256":"5458fa53607af5ae355b04fddad535e4cb8493350d83246b99ed2555efc2fb5f","sha512":"4f6dbe30e89773cc3d1dcb7c4770240e585ddda9a9599adbc6cba5a4774bc9d2cdfb5fbeca772f0dba3a71189d7404eaa5a52f1d8810ddcb9fc04f6aa60258d6","ssdeep":"384:jmjIaLclk9uxSNjsRiJ8NKFu41i3ly3wzsiepWpk:jm8cclkQxSNj2iJXFu41clqwAieUpk","tlshash":"617245d003b668d24b840d208aa8910575a4e9779d512814ffecc5eddf2c9ee6bb738f","size":17309,"data":"","first_seen":"2026-08-06T23:14:27.809612Z","last_seen":"2026-08-06T23:15:52.321573Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.ahrefs.com/analytics.js","fqdn":"analytics.ahrefs.com","domain":"ahrefs.com","tld":"com"},"ip":{"addr":"104.18.39.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"661ceae031b0d59dc2f3beeac0ae7cfd","sha1":"3b7e9107ffeb21d0c41bfdeef7118ea9d58be07b","sha256":"b270afc5f9df7bcd9239c22857fb1511bba1398a28b1c3548272d720cb433c62","sha512":"b9630a50fbf1c6db29b47246715f640bdc24ed2d268627305989e615be4999fac0d8cbbef4336c2bae701eef903554954566e8dc23a6d623ddf7cfedffbaa062","ssdeep":"192:04fDU0pA7KQisEplEXQI5AuTYafgbNCz1Rx5NFKtiF:jfDU0pA7KQi3plEXQI5AygpC1RnK8F","tlshash":"c8e11a9c723075790877ada1e5ff3743f233a563a881e0914219dd802dac98f42abddd","size":6947,"data":"","first_seen":"2026-01-07T13:13:26.365481Z","last_seen":"2026-08-13T19:43:03.861497Z","times_seen":13591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kualianq.com.cn/tp/protocol_switch.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.247Z","timestamp":1786058117247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/protocol_switch.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 63743\r\nlast-modified: Tue, 14 Jul 2026 05:56:55 GMT\r\netag: \"6a55cfa7-f8ff\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63743,"size_decoded":63990,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1025x880, components 3","md5":"1aa376f187b11ea3798830ea24b8abcd","sha1":"9552c0ac50b6ad856491e5a0ddb53e7e4c8c7554","sha256":"1d2b44a30d7645f75b3feba69b213f6457353f7f3ed23a34cc87ec4c64b27f32","sha512":"532730a1e8bf7092438d937e6293509e6a69ee8df16dd24197a94063d1644f37e2481fea476174fcc20602065bb9038c2b4e8c10edbf14b766b3a837097a2b85","ssdeep":"1536:OsWPgscTuT+MYOE2OV4u8onAtVbWaLPhnvNuiMOGCWAmnumN6c:Os4g/6T+MTpdKAthWaLhvNuq6umX","tlshash":"9953f11fb7a50a71c5cd0fb791ffd752ba6a2c64228feb29d1c0b1007622b60d94db54","first_seen":"2026-08-06T23:14:27.794843Z","last_seen":"2026-08-06T23:15:52.296225Z","times_seen":2,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/site_block.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.250Z","timestamp":1786058117250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/site_block.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1626926\r\nlast-modified: Sun, 12 Jul 2026 05:47:02 GMT\r\netag: \"6a532a56-18d32e\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1626926,"size_decoded":1627177,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGB, non-interlaced","md5":"b79fff18a33f98283dacdddcf1fa04a0","sha1":"0fb2b91f30afba265f1c7f2752eb6dc517e5ddd9","sha256":"c673f4289a0114cb5a4efdf92f716be4c4c42876db82ea70b4d49f282e9cec55","sha512":"3a44f1306e603ccaa5b5bac34f59329fddbbe4190f511d74694d7edb8a20f2ee532ba9601dbe9adf8bb0ed5b2ad7ac424d4a4cc7c4838803991ed9445f7678c2","ssdeep":"24576:1ca+eFvpbxVg2jy+HEfaCU5IIfNqQtJa8JcPw8ProPFkIU2ktcZGBM:ia+si2fHEfyf1m8WpTWFkuki","tlshash":"732533c2bdf80933dc8b6e35d8834c62f7227db23a780d2bdc4da6b0756927949543a5","first_seen":"2026-08-06T23:14:27.795678Z","last_seen":"2026-08-06T23:15:52.297101Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":741,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/kl1.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.066Z","timestamp":1786058117066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /kl1.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1224947\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-12b0f3\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1224947,"size_decoded":1225198,"mime_type":"image/png","magic":"PNG image data, 1100 x 1100, 8-bit/color RGBA, non-interlaced","md5":"1caf8872fc5e25f5c52e960fe4cbf80e","sha1":"09b82b0ebe57e9956bba83e2ee79cedce952d330","sha256":"0093291cac4e65c20e2b8ea445a166bb5c2e736b2b1cc913108b07701804d29a","sha512":"d84b622a47e4468a572d7731d756de77d0018d6c58fd06b4a6365ee6ba2ae320584adbfb582afa11e625419588fde24cab2efe54d341b75a4b67c593d7c3f99b","ssdeep":"24576:XWpDFXkoaCRlX3S0wAmL2VTPngmfsNqFaUz70Nk3PtrjUG:XWp1klCRlndd4msN2Tz70ur1","tlshash":"6b2533d8ec6ec4f1f819775af514baed6d43c11c2e7910092d83e4682767a23892afc6","first_seen":"2026-08-06T23:14:27.786924Z","last_seen":"2026-08-06T23:15:52.297944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":1251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/kuai.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.068Z","timestamp":1786058117068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /kuai.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 151475\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-24fb3\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151475,"size_decoded":151724,"mime_type":"image/png","magic":"PNG image data, 1120 x 720, 8-bit/color RGBA, non-interlaced","md5":"a00adf1905794bc98bec48a0ae1fd004","sha1":"05d8ad7adf09524b6c9b7e50d6ff526d6564929c","sha256":"2ec3d7c5f9aeabde3812dc6407155310e0ce05970b38e83770d6c1497b087152","sha512":"76869a86a0ffc3dfa856eca616aedd1e85d8afcfbe44b481d15e848835f9ad8a8099a6938de5c3717e5fc52565022b22b2e3a363c17b242f81d54f50ec18d5b6","ssdeep":"3072:f577bSzY+sx757GPMqgl1xRo8zKaHrErhR262C2tNxY+:ZnGY+87RIMqgrHr82tp","tlshash":"b5e3121e0eb1b2880d3426774039bdf21761944b66009ae5ca7873d96cc6e7a7efe50f","first_seen":"2025-11-20T19:44:55.814126Z","last_seen":"2026-08-06T23:15:52.298633Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":734,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.213Z","timestamp":1786058117213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kualianq.com.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 02 Aug 2026 10:34:00 GMT\r\nexpires: Mon, 02 Aug 2027 10:34:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 391277\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-13T20:04:26.712595Z","times_seen":31946,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":43,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/logout_guide.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.235Z","timestamp":1786058117235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/logout_guide.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 130106\r\nlast-modified: Thu, 06 Aug 2026 04:42:11 GMT\r\netag: \"6a7410a3-1fc3a\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130106,"size_decoded":130355,"mime_type":"image/png","magic":"PNG image data, 750 x 458, 8-bit colormap, non-interlaced","md5":"68b84bafe0c18b4de52f799a591d62b5","sha1":"e2a97487d21b8c0b76a295e553eb94a94cdd7765","sha256":"f72b2120f921b2a8d808812b7ffe6a30c29daafd5a9f001577eacff0a398a56a","sha512":"53e112502a1e2abb7827495fa3569506a3c08ebf37651d76f3f0214ea830a1f5a4ebd4b8208b614b609dd15140bf9dde069d6556fd55cde5ab9b60ab1d99c510","ssdeep":"3072:WOh2BkPhOf6pTBtwk+cMuUOdM3JcqUxAmjSzwYM+GCNF7Y3:WOUBkPQf6pTtNMuUOdMKdTYM+NF7Y3","tlshash":"5bd3125c3140d46392f6910b82c273fac4517fe67f98bd2f46e293f379752a8c08a91a","first_seen":"2026-08-06T23:14:27.796593Z","last_seen":"2026-08-06T23:15:52.299996Z","times_seen":2,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/disable_autoupdate.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.239Z","timestamp":1786058117239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/disable_autoupdate.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 42777\r\nlast-modified: Sun, 02 Aug 2026 04:00:57 GMT\r\netag: \"6a6ec0f9-a719\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42777,"size_decoded":43024,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1000x610, components 3","md5":"2bfdd61f966368dd90091b860bffa66a","sha1":"7e6afba29d2e80d856675d5297c1716d7cfcabf5","sha256":"e01f2777d4e3cbb7f6f85296013fb12eb7294c8efa503aef005d3770127c2766","sha512":"ee36edf2e3fc71adb1cfc35cc26b61944fa2f9cde190977f5249e0ba403d005fd4161b0ad26d4085e2f254887307c136c90387625e6ee36017aef61cd0e3a70f","ssdeep":"768:GXR+R6O/4pa8rk5bKZKsssssss3aAzXOD+23vNkCjZ73dxS4bkjiqPuU:lR6Yr8o5+Z9a9+IkCajtl","tlshash":"0a13d00aabb85ab0f76855f0108247e6fb95fa6a3c45d53dd100f84f6cc5abf7c89902","first_seen":"2026-08-06T23:14:27.77695Z","last_seen":"2026-08-06T23:15:52.300624Z","times_seen":2,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/unstable_connection.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.240Z","timestamp":1786058117240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/unstable_connection.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 44888\r\nlast-modified: Tue, 28 Jul 2026 02:48:28 GMT\r\netag: \"6a68187c-af58\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44888,"size_decoded":45135,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1000x610, components 3","md5":"502124c3291fbaa6119c989b765fa7c5","sha1":"07bddbaa544f9629ac1ac204e6fae0957dd2f0fc","sha256":"9bf67d3ea62ef3ea554209b9c50bf4613a3b71f61bd1e56533d4b24f5d5e4a38","sha512":"ec190b8d7d957e950e32c66c90187b12765767b221dbb5694eb3a4844f861b6d95c8a87ecd18d92cb5b56aa792724cbb9aaf287d85ae04f6bea3e0cfd29a392a","ssdeep":"768:jTbaaM4Rnq27lhNe+wWXlsVNNP7Qj4i86G/vaTkNQLQYoz7AlkhI+iIr:+mnqT+wWXlsVNNPQ4ioLNQLQ3z72+B","tlshash":"5213e17b0fb20e87ee2f67f614ffcf82fd1878739198226b1cb2517c246695a0151166","first_seen":"2026-08-06T23:14:27.78782Z","last_seen":"2026-08-06T23:15:52.301353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/check_subscription.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.245Z","timestamp":1786058117245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/check_subscription.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 40127\r\nlast-modified: Thu, 16 Jul 2026 04:14:02 GMT\r\netag: \"6a585a8a-9cbf\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40127,"size_decoded":40374,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1000x610, components 3","md5":"b5f08b86a04e4da9ced897b38bef61dc","sha1":"4e2f27a6113ad0767ba8c811c055a6d8b316ab7e","sha256":"8107f402ccf6ed72efe14fbb9cdd219c57d8c414a0577cac1a8925693f310b03","sha512":"0097d51bc95ce505c6301b9bdea91feabbbd71be2b0558af36b9458ffe0117f6769504e632452b3df0ad642864988a139bad626e012d4cc7a7176acd73cfc4be","ssdeep":"768:UDDPfo3N1aJDV7ocU6ek9XE8Ew4gnVm+eiw5zo5CZFZwX31utZR:efo3N1MhM2XE8dV2hZzMOZR","tlshash":"0f03e15630e29b47f960babe1a571374da103a1c353dc80370f7ccbb50dfa62a68d519","first_seen":"2026-08-06T23:14:27.807731Z","last_seen":"2026-08-06T23:15:52.30206Z","times_seen":2,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/reconnect.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.258Z","timestamp":1786058117258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/reconnect.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 67812\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-108e4\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67812,"size_decoded":68060,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"a38ffc4587caff8e6caab87a97a9a9a3","sha1":"1ea4f795bbf11e0b490dbf10f302052de149a255","sha256":"794a213454e6c1a8b74b20b0cad70a8c5f33405ab7f6ed6d0ffbcdade904cf5b","sha512":"df3c0be102c672fa77d48d7dd1d768ef1376513c6d8dd7c52241950d0b0648ce4c6b651fcaffbefe835063204c90d78a4c7563d643d370e199422e175b8c3191","ssdeep":"1536:Z7PekF7oCxS+CPqLn5xkS8N9Bi6j+Zz/h:hnxSBqLSB4x/h","tlshash":"e763f1a71962c84be349c43a4c9156377a4ee3d3a038672cef5927280d7f6b4ab47634","first_seen":"2026-08-06T23:14:27.790427Z","last_seen":"2026-08-06T23:15:52.302703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":391,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/smart_split.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.246Z","timestamp":1786058117246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/smart_split.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 227795\r\nlast-modified: Wed, 15 Jul 2026 03:16:14 GMT\r\netag: \"6a56fb7e-379d3\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227795,"size_decoded":228044,"mime_type":"image/png","magic":"PNG image data, 600 x 400, 8-bit/color RGB, non-interlaced","md5":"c2693bc467257ecad4710f9ba604b784","sha1":"6cadd291f3eae97fa05877f3c86cf586a238e04f","sha256":"0b01c6514b64e48fc6855216a507dd9659e790b6d285f4111b0ee99e2d4024d9","sha512":"7b642fb5ea3d347285e4336f7a2f9419211cabd0e6e8a906d30d78482e0c3e955322e1a15884ae4b489e33f843dc145c1498ebdf8ac62960172da3753754c7e5","ssdeep":"6144:8tLy3I0QWr0eaEdbG2Snl/oUNTqg0a3h1MYuJ:ih0rjxVql/o6b08hS","tlshash":"352423143611ac340ac53806dcfdd7ec1e27ab00f666cd4a996fe9382dca4f6e9647c9","first_seen":"2026-08-06T23:14:27.789624Z","last_seen":"2026-08-06T23:15:52.303365Z","times_seen":2,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":459,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/auto_start.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.247Z","timestamp":1786058117247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/auto_start.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 530789\r\nlast-modified: Wed, 15 Jul 2026 03:09:03 GMT\r\netag: \"6a56f9cf-81965\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":530789,"size_decoded":531038,"mime_type":"image/png","magic":"PNG image data, 836 x 471, 8-bit/color RGBA, non-interlaced","md5":"b62a983b854cf6d34e8d9e9e67b96432","sha1":"050f4215a830e10748ddc1d49012c5fecff49237","sha256":"1450a0aa49d564ae5e9775924a38d155fedc7855e39b36f26d6aa98bd9f414f2","sha512":"67d35cec152ed191cc2bd2cdb0d5cebadd95ef514868ae862d85c58ef5a23089e5dcaebc799e512e9f9cbca13a80787b186835ebbefa9458e7ddbc29d7e3c4ba","ssdeep":"6144:ZyoVNxUV71EnAtNiXq60Rdnm0prLtKX7ieIK+3WhxDS8h7fB9noa+3mEQD95h9jn:ZyGxUV71ENXd0pPzcxDrLoQDhhnLi633","tlshash":"4cb423a944c14fbac374886b5429b037b50e3d1bb7c60d5a1bf0c2e550876aef35ab27","first_seen":"2026-08-06T23:14:27.797497Z","last_seen":"2026-08-06T23:15:52.304009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":675,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/ktp.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.260Z","timestamp":1786058117260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/ktp.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 75261\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-125fd\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75261,"size_decoded":75509,"mime_type":"image/png","magic":"PNG image data, 1159 x 878, 8-bit colormap, non-interlaced","md5":"af5a7b361846890acc185f114ee17bc7","sha1":"6a166c9e4c951e3712bfcc63cfb2f702a4d54ebb","sha256":"e383deaf4828548d664cc4ac32c83b65ec4ed24a0ef67ed0fbed9b41fe12ecfd","sha512":"72015fe656f8d2e0187b801731fdbb73c325a495d2b798b02493e92695ba92b0211832eb649415fd8e4985f5f3a7477c3e7dd4db2c399e0bd1db93310f68ab3f","ssdeep":"1536:qsQkTm13tnGOcnvLxlVp9eVmU37+xbtw5xlkFTskprFRcLqGG5:dLazYvb9kRr+xxMxlkFpprrsqGG5","tlshash":"657312efd58d308da26bb69c7645678f034e6b92c323cc774046e72632ced1190a95a8","first_seen":"2026-08-06T23:14:27.783368Z","last_seen":"2026-08-06T23:15:52.304674Z","times_seen":2,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":391,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/register.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.261Z","timestamp":1786058117261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/register.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 151475\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-24fb3\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151475,"size_decoded":151724,"mime_type":"image/png","magic":"PNG image data, 1120 x 720, 8-bit/color RGBA, non-interlaced","md5":"a00adf1905794bc98bec48a0ae1fd004","sha1":"05d8ad7adf09524b6c9b7e50d6ff526d6564929c","sha256":"2ec3d7c5f9aeabde3812dc6407155310e0ce05970b38e83770d6c1497b087152","sha512":"76869a86a0ffc3dfa856eca616aedd1e85d8afcfbe44b481d15e848835f9ad8a8099a6938de5c3717e5fc52565022b22b2e3a363c17b242f81d54f50ec18d5b6","ssdeep":"3072:f577bSzY+sx757GPMqgl1xRo8zKaHrErhR262C2tNxY+:ZnGY+87RIMqgrHr82tp","tlshash":"b5e3121e0eb1b2880d3426774039bdf21761944b66009ae5ca7873d96cc6e7a7efe50f","first_seen":"2025-11-20T19:44:55.814126Z","last_seen":"2026-08-06T23:15:52.298633Z","times_seen":9,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":440,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/platform.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.266Z","timestamp":1786058117266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/platform.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 360829\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-5817d\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":360829,"size_decoded":361078,"mime_type":"image/png","magic":"PNG image data, 550 x 550, 8-bit/color RGB, non-interlaced","md5":"dc45c489c2fa4735f9cdf2f4daf8baac","sha1":"bc0d666e6b44d9e377a246ed2f53f5289b784243","sha256":"f12ffb3675aa4e12783a7acb9802d5369f3bd6ef427da26bc567295c7990b542","sha512":"9ba2b3c17704f3473c1d31f6f79cc979ea1f5c5399aa21c942480ae8486f49e1a039b882fe9ba0e0088b491b3ca43851b28f19f0ac8b3f8b2fad16adf22bb567","ssdeep":"6144:z9Q8m99/v5HSrYD7c5+R7nl4maoFhu56wtOIgpVopXICvbOKCxpyx5dCP+g8F9Mf:hQ8m99ZH5fl9DS56sO8NzOKqyxbCb+FQ","tlshash":"ee7423e73f6c259528a80413052fea980fc35ed8dbb87de1734017f119ab8e627b5b19","first_seen":"2026-08-06T23:14:27.791361Z","last_seen":"2026-08-06T23:15:52.305249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":646,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/favicon.ico","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:18.533Z","timestamp":1786058118533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:18 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 55841\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-da21\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55841,"size_decoded":56091,"mime_type":"image/x-icon","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"b33adf913fd02070cce999aa53a18e60","sha1":"e4250aa951bbb7b76b57ff2c9b0b04fff88f89c3","sha256":"0e87f01027217ca6d19b5873e1b7aa18b615660872f77f865c7724b53b2ab3d3","sha512":"a8b8777871062b874026cde5cf19d7df8f76e713419aa7acaa90879fb6bfa72e8896758f7f4044fdcc7b2d1de82d18596523d541bbb2c7011355002c3e6f56c7","ssdeep":"1536:qaIW+ufihFT4UAxnBPQ9KlCVbM2d0PbqQ7:3yhGUAxq9KinaPL","tlshash":"e443f12f645a04d35327e8f49ddab7b1b45686a32b0951c102a8592bc33aefc0d7db4f","first_seen":"2025-07-18T05:41:19.483402Z","last_seen":"2026-08-06T23:15:52.305833Z","times_seen":24,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-06T23:15:15.486Z","timestamp":1786058115486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:16 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 06 Aug 2026 07:36:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a743962-13069\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77929,"size_decoded":17900,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"9b8459ec6863332c2a2b753e45d3496c","sha1":"db6a8460e0ca6e5d84b4da2e6b0128e88cb2a1fa","sha256":"b285d41541b5fec3356f2085832fed59bcd9c311bb8cda4dffb4684fc825cb2c","sha512":"fa33b34bf298314da725c0ec8c1d4184be3a6faae4c999f123e26a82a46492a22f8e042cc5db69b256e6ca3dab86ff3fd1abb001230e72304b9b090c4d0dec50","ssdeep":"768:BYBagPo8JY4Sm793nYAkma8QcHWQ9Geq2oZA6DTtNy2+eJXMyN3w:BYBfRrjBXda8QcHWQRoq69Ny2+eJ8Qg","tlshash":"6073b6525250189355339af4db61870bfaa0c257c30282697bfc93da9fb6c189a73f4f","first_seen":"2026-08-06T23:14:27.799379Z","last_seen":"2026-08-06T23:15:52.306355Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1184,"timings":{"blocked":-1,"dns":2,"connect":131,"send":0,"wait":915,"receive":0,"ssl":136},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:opsz,wght@14..32,400;14..32,500;14..32,600;14..32,700;14..32,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.056Z","timestamp":1786058117056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Inter:opsz,wght@14..32,400;14..32,500;14..32,600;14..32,700;14..32,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 06 Aug 2026 23:15:17 GMT\r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12040,"size_decoded":1462,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5904bfe8ea8e77ec97bd936b6c65e754","sha1":"242e4787b13193bb368d4ccee7547e6500febf00","sha256":"9c28397a0ffb43a663bda102bfc0648a106b332baf5cb2d52ac61b33583b800e","sha512":"267122d8793535001c93ddc0e8875091a31f4117ac9babc72a6525c529e75c269043a2e973553bcdff3959c6979e9d1060ea53dfa37e9093826f5073ea6616f4","ssdeep":"192:93N1aj34wfDg3OWJj3/Xf8Z3rTQj3i6flq3EM3j3RpfGD3xp2j3kMfHN:BskLaiY5a4t","tlshash":"0e429c91006be500af431dda23df7e366d8e15966082d57e9bfd1cc9aceed22032878d","first_seen":"2026-03-04T13:38:41.145143Z","last_seen":"2026-08-11T11:01:19.119662Z","times_seen":61,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"019f6426-9a9e-745d-9277-a52c8316ea50.spst2.com/ustat.js","fqdn":"019f6426-9a9e-745d-9277-a52c8316ea50.spst2.com","domain":"spst2.com","tld":"com"},"ip":{"addr":"104.143.37.101","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.060Z","timestamp":1786058117060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spst2.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 09 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D3:98:35:11:65:78:F0:C2:D3:6E:4F:2C:34:61:33:6E:F1:2C:22","sha256":"24:7D:84:49:9D:5E:D5:0E:E3:47:03:D9:66:58:AE:BF:7C:B0:17:51:D4:D7:35:BA:A2:16:5E:BC:F5:1D:A5:6D"}}},"request":{"raw":"GET /ustat.js HTTP/1.1\r\nHost: 019f6426-9a9e-745d-9277-a52c8316ea50.spst2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Thu, 06 Aug 2026 23:15:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=600; immutable\r\nlast-modified: Sat, 01 Aug 2026 02:21:36 GMT\r\nx-proxy-cache: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3560,"size_decoded":2163,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1790)","md5":"8d2dcb33648361b7c292d9d37b3362c1","sha1":"19795ed2eb3c236ecbae624fbed062a2e0fbd30e","sha256":"6ae58a7ab727aa1b6328d0cf5133c17ac6b03df8858eef3d33f12eba5311f837","sha512":"a99244050bfab74c831a87aa94eef4907628de6c9dcd49539a14ff1e06f1912005d347b77e9821554f69bd78bd211f0bdcce5134711062cfb8815669ce975597","ssdeep":"","tlshash":"ba71e8e2369454b263bd4cdee175c690ea3a02c87457a1e0737d0c0a7f4fc82a5a7e98","first_seen":"2026-06-01T09:16:03.175154Z","last_seen":"2026-08-06T23:15:52.307565Z","times_seen":42,"resource_available":true,"data":null}},"time_used":1194,"timings":{"blocked":-1,"dns":313,"connect":219,"send":0,"wait":220,"receive":0,"ssl":442},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.219Z","timestamp":1786058117219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kualianq.com.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 02 Aug 2026 10:34:00 GMT\r\nexpires: Mon, 02 Aug 2027 10:34:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 391277\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-13T20:04:26.712595Z","times_seen":31946,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":23,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/change_password.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.238Z","timestamp":1786058117238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/change_password.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 151475\r\nlast-modified: Mon, 03 Aug 2026 03:13:59 GMT\r\netag: \"6a700777-24fb3\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151475,"size_decoded":151724,"mime_type":"image/png","magic":"PNG image data, 1120 x 720, 8-bit/color RGBA, non-interlaced","md5":"a00adf1905794bc98bec48a0ae1fd004","sha1":"05d8ad7adf09524b6c9b7e50d6ff526d6564929c","sha256":"2ec3d7c5f9aeabde3812dc6407155310e0ce05970b38e83770d6c1497b087152","sha512":"76869a86a0ffc3dfa856eca616aedd1e85d8afcfbe44b481d15e848835f9ad8a8099a6938de5c3717e5fc52565022b22b2e3a363c17b242f81d54f50ec18d5b6","ssdeep":"3072:f577bSzY+sx757GPMqgl1xRo8zKaHrErhR262C2tNxY+:ZnGY+87RIMqgrHr82tp","tlshash":"b5e3121e0eb1b2880d3426774039bdf21761944b66009ae5ca7873d96cc6e7a7efe50f","first_seen":"2025-11-20T19:44:55.814126Z","last_seen":"2026-08-06T23:15:52.298633Z","times_seen":9,"resource_available":false,"data":null}},"time_used":913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":497,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/check_ip.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.241Z","timestamp":1786058117241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/check_ip.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 39807\r\nlast-modified: Mon, 27 Jul 2026 01:22:03 GMT\r\netag: \"6a66b2bb-9b7f\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39807,"size_decoded":40054,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1000x610, components 3","md5":"12e7f31e9252c75973ada559524c7223","sha1":"943a24ebf3c999b74f8f428815ed0b4d35faf835","sha256":"19da20663571ff7e9f71f67ab14619bbe420b60488b49c58c44c81d27593fa16","sha512":"94aa2cd54ac3a7c5a1d64364e9cde116ff9898717a60a78ec8a13f881ed34aa0fdda9d94e5a40af3453f8b597c9c57c863350609f641666fab04703ce16be438","ssdeep":"768:klN6DOk1Fw0fLMeJoRRZYvX0Y5hgRwW8xoWKjpj0GM9E9YTgHMIBm:u6ak1pjXoRnYx5hgRw+KK2tIA","tlshash":"8003e179952a1c3ed7a1c1b6e0d179a0cb21e91c23b16b50b7228d43746b29cfdb9788","first_seen":"2026-08-06T23:14:27.788664Z","last_seen":"2026-08-06T23:15:52.308041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/bind_info.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.242Z","timestamp":1786058117242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/bind_info.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 8721\r\nlast-modified: Fri, 17 Jul 2026 04:54:40 GMT\r\netag: \"6a59b590-2211\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8721,"size_decoded":8967,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x300, components 3","md5":"5e16ceb7b94b60c9503ca0512c90a493","sha1":"467c787eeacf8b4cfbaea29ad354243839421125","sha256":"04f81162554bdd656b29cb03db96126eb4685a89c0a6b8421bef3790afab5b5c","sha512":"8bf74b31b87ac411899154e056188bc7f988387ef57e15b6093ddc5c416b821696e1724ddecc4ffc5683ad13299b17139a28cfe53f6a55a7010b9d2636e676e7","ssdeep":"192:IvzHM52VQE8QUVPBlwWsdfaFOivpWYAbNu2zKE8bTtx2qBM:IbnQZVMBQO6pW5z+bTt1M","tlshash":"87029e6efaf38893d284433947db43e4db967d40b78aeb0562a2d6148c7b384d84815f","first_seen":"2026-08-06T23:14:27.802369Z","last_seen":"2026-08-06T23:15:52.308873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/trial.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.262Z","timestamp":1786058117262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/trial.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1626926\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-18d32e\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1626926,"size_decoded":1627177,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGB, non-interlaced","md5":"b79fff18a33f98283dacdddcf1fa04a0","sha1":"0fb2b91f30afba265f1c7f2752eb6dc517e5ddd9","sha256":"c673f4289a0114cb5a4efdf92f716be4c4c42876db82ea70b4d49f282e9cec55","sha512":"3a44f1306e603ccaa5b5bac34f59329fddbbe4190f511d74694d7edb8a20f2ee532ba9601dbe9adf8bb0ed5b2ad7ac424d4a4cc7c4838803991ed9445f7678c2","ssdeep":"24576:1ca+eFvpbxVg2jy+HEfaCU5IIfNqQtJa8JcPw8ProPFkIU2ktcZGBM:ia+si2fHEfyf1m8WpTWFkuki","tlshash":"732533c2bdf80933dc8b6e35d8834c62f7227db23a780d2bdc4da6b0756927949543a5","first_seen":"2026-08-06T23:14:27.795678Z","last_seen":"2026-08-06T23:15:52.297101Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":653,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.053Z","timestamp":1786058117053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 14850\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CeEEBhNWOgXMHz62JfyMlEZXWeUKTkvgNWZb5Y%2B66Do0Y4fKb30J5hj3sUOcEocQiNy1vdm4%2BslA5NC05Z%2FqrmFRDuve3irnHyTzzhr9MirlUkguKY4m8p7pYwbVjt0ZPYeii4yg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a271be1fafc8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83981,"size_decoded":15841,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65311)","md5":"3d5ef2bf867c4054a2f336cdbad9e1dc","sha1":"07228d1fa3245ee156a27a353f45758a3207849f","sha256":"a361e7885c36bacb3fd9cb068da207c3b9329962cac022d06e28923939f575e8","sha512":"168deb96b663fe4eee8d39c78380864760fb912b34bf82cb6a7c36aa4b18b91944ccefad71a10f428810d0a6a818ddbaff3ae7db42264750dfb8b5a73a8eda04","ssdeep":"1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITRUHrt+z:sdhgw9kITRULt+z","tlshash":"458376e8e44c05d56732c44baf55b378a1b6f73cd5810da9f02f590c29d26a822c6f7a","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-08-13T18:52:18.017996Z","times_seen":21610,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/logo.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.065Z","timestamp":1786058117065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 3109\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-c25\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3109,"size_decoded":3354,"mime_type":"image/png","magic":"PNG image data, 218 x 58, 8-bit colormap, non-interlaced","md5":"4ac3a0140ead7e7d5352e1b99f09ae0f","sha1":"11b9d2433490b1d8354f465f79f369807960c025","sha256":"0d8ab7ef4cc0b82efebd6d255f4fbeb471f805787f59cc9dba142fb8d35b056e","sha512":"f2a739d432a2891f354cffaf382041a2e9c2a51b0235f24f8dcccfa4892d992cdf1a03d8537e5db8748d0cce433ee0d163fa44107f2fb0c59a3aa6c7788f842a","ssdeep":"","tlshash":"b9514dd47686ff021dcc44d24c7b99fe622b2d058bbb471113731b9500a465d869ce8d","first_seen":"2024-12-08T01:04:46.503851Z","last_seen":"2026-08-06T23:15:52.310594Z","times_seen":13,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/update_fail.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.251Z","timestamp":1786058117251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/update_fail.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 97440\r\nlast-modified: Sun, 12 Jul 2026 04:41:47 GMT\r\netag: \"6a531b0b-17ca0\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97440,"size_decoded":97688,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 772x585, components 3","md5":"fe505f0da4ee0cd02cf7a77433a5df7c","sha1":"fb6038ed9b1e05b84e5e1a5c2e4490a0cef8fa34","sha256":"6e7474b1e0f76a6157cba1c01c2426f1daa616329d49331bea0736076b950ee2","sha512":"577d781646617bda5f1bfb921d65ce0e2fb9f81494739ae9faefe9a04546e1d6dd6780775e51d1d344430fd33d91bce978e2d3fca5a39b1894496eadc24d8a51","ssdeep":"1536:bBkRVqvrlpeMGvBbmKQGdCGW0lI77vNkWUNDosaKXTayhjWXV+KL8f4+3I:oWvQuGdHI773UNHaZyhjWSAH","tlshash":"6793cf17062ee359cc97e96e26c2078b7a1e5068d7b43d9fcd49713da46a8877ec034c","first_seen":"2025-11-01T03:13:20.297417Z","last_seen":"2026-08-06T23:15:52.311424Z","times_seen":7,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":362,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/account_block.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.252Z","timestamp":1786058117252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/account_block.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 227795\r\nlast-modified: Sat, 11 Jul 2026 04:21:15 GMT\r\netag: \"6a51c4bb-379d3\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227795,"size_decoded":228044,"mime_type":"image/png","magic":"PNG image data, 600 x 400, 8-bit/color RGB, non-interlaced","md5":"c2693bc467257ecad4710f9ba604b784","sha1":"6cadd291f3eae97fa05877f3c86cf586a238e04f","sha256":"0b01c6514b64e48fc6855216a507dd9659e790b6d285f4111b0ee99e2d4024d9","sha512":"7b642fb5ea3d347285e4336f7a2f9419211cabd0e6e8a906d30d78482e0c3e955322e1a15884ae4b489e33f843dc145c1498ebdf8ac62960172da3753754c7e5","ssdeep":"6144:8tLy3I0QWr0eaEdbG2Snl/oUNTqg0a3h1MYuJ:ih0rjxVql/o6b08hS","tlshash":"352423143611ac340ac53806dcfdd7ec1e27ab00f666cd4a996fe9382dca4f6e9647c9","first_seen":"2026-08-06T23:14:27.789624Z","last_seen":"2026-08-06T23:15:52.303365Z","times_seen":2,"resource_available":false,"data":null}},"time_used":921,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":432,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/nodefail.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.254Z","timestamp":1786058117254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/nodefail.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 97440\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-17ca0\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97440,"size_decoded":97688,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 772x585, components 3","md5":"fe505f0da4ee0cd02cf7a77433a5df7c","sha1":"fb6038ed9b1e05b84e5e1a5c2e4490a0cef8fa34","sha256":"6e7474b1e0f76a6157cba1c01c2426f1daa616329d49331bea0736076b950ee2","sha512":"577d781646617bda5f1bfb921d65ce0e2fb9f81494739ae9faefe9a04546e1d6dd6780775e51d1d344430fd33d91bce978e2d3fca5a39b1894496eadc24d8a51","ssdeep":"1536:bBkRVqvrlpeMGvBbmKQGdCGW0lI77vNkWUNDosaKXTayhjWXV+KL8f4+3I:oWvQuGdHI773UNHaZyhjWSAH","tlshash":"6793cf17062ee359cc97e96e26c2078b7a1e5068d7b43d9fcd49713da46a8877ec034c","first_seen":"2025-11-01T03:13:20.297417Z","last_seen":"2026-08-06T23:15:52.311424Z","times_seen":7,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/local.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.263Z","timestamp":1786058117263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/local.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 227795\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-379d3\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227795,"size_decoded":228044,"mime_type":"image/png","magic":"PNG image data, 600 x 400, 8-bit/color RGB, non-interlaced","md5":"c2693bc467257ecad4710f9ba604b784","sha1":"6cadd291f3eae97fa05877f3c86cf586a238e04f","sha256":"0b01c6514b64e48fc6855216a507dd9659e790b6d285f4111b0ee99e2d4024d9","sha512":"7b642fb5ea3d347285e4336f7a2f9419211cabd0e6e8a906d30d78482e0c3e955322e1a15884ae4b489e33f843dc145c1498ebdf8ac62960172da3753754c7e5","ssdeep":"6144:8tLy3I0QWr0eaEdbG2Snl/oUNTqg0a3h1MYuJ:ih0rjxVql/o6b08hS","tlshash":"352423143611ac340ac53806dcfdd7ec1e27ab00f666cd4a996fe9382dca4f6e9647c9","first_seen":"2026-08-06T23:14:27.789624Z","last_seen":"2026-08-06T23:15:52.303365Z","times_seen":2,"resource_available":false,"data":null}},"time_used":982,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":506,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/encryption.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.265Z","timestamp":1786058117265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/encryption.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 126971\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-1effb\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126971,"size_decoded":127220,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x1200, components 3","md5":"b45a1a668157034a7e3c8c2a9b691443","sha1":"733a9d373c1cdf897f85a7b72ecd99bef916580c","sha256":"8ba197846ca1ae6d43c7992282db9b6f277e473b395bfcdb44c50b09aca64736","sha512":"480b61132a876a110b7d86418e98a2f94c2834f1c84f214fa62b46440c4edd45eb6198e5667a4445b97d8ea75f4526ae4f620b1ff98cb6c7cdcf6d484520ef87","ssdeep":"3072:2GY2XyPaiqH6eNd/ZYJjJJYQCBHgeVDF5jo9XT:C2XyPcaeNd/ZYVHaZggF5jAT","tlshash":"c0c312928c098293b9ad2df7570b9a391dbe340ec13eb867ddf60e84e90d091d99453f","first_seen":"2026-08-06T23:14:27.779909Z","last_seen":"2026-08-06T23:15:52.31222Z","times_seen":2,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":401,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/ip.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.268Z","timestamp":1786058117268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/ip.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 524434\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-80092\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":524434,"size_decoded":524683,"mime_type":"image/png","magic":"PNG image data, 1024 x 500, 8-bit/color RGBA, non-interlaced","md5":"fcd2e8c4a36c24a8506b5621bcecc43f","sha1":"355d67a293f0d47acf0d86896ece972769bc80ee","sha256":"b59863416e50c55893c84c32c5d28345133c91234b58ce68f093558e166bd7ac","sha512":"e67d7ec31ee3345dde1a0144c6cba8e1b513dec51e33abf8fc94cb62f2b5f15dedc7fdcc29eb0cc56a7e909364e66591bcef88069dbca76e937853212b50cc46","ssdeep":"12288:mfLB5ctuQfx01CJNodjD+p7FsNN94Zlc7iCt66bdBYx34c0h:QB+gQfx0kJNoNDqBsN/7iCt6OPy4c0h","tlshash":"86b423fb15e25e038e839d55ecb21edb64b29a6c179f392b74e4d25e049b362f24c0c4","first_seen":"2026-08-06T23:14:27.784372Z","last_seen":"2026-08-06T23:15:52.313082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":655,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.ahrefs.com/analytics.js","fqdn":"analytics.ahrefs.com","domain":"ahrefs.com","tld":"com"},"ip":{"addr":"104.18.39.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.058Z","timestamp":1786058117058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analytics.ahrefs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 08:12:36 GMT","end":"Sat, 03 Oct 2026 09:12:08 GMT"},"fingerprint":{"sha1":"84:19:A8:CF:39:BC:A7:8F:39:1B:79:AD:F4:E7:EA:E6:42:26:CB:EF","sha256":"4D:2C:16:B8:0D:0F:8E:F9:F7:1F:1A:EB:5C:92:79:A4:D4:44:A4:45:81:47:22:9B:5B:AE:2D:5D:F7:6A:D4:FC"}}},"request":{"raw":"GET /analytics.js HTTP/1.1\r\nHost: analytics.ahrefs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2692\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\ncdn-cache-control: max-age=18000\r\naccess-control-allow-origin: *\r\ntraceparent: 00-6fac8a4f796f486091a84c0f7cafe6b2-579222fe1c1240f0-03\r\nx-request-id: 7f07f009-3f10-451e-9bd0-cdc291344ac4\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 458\r\nlast-modified: Thu, 06 Aug 2026 23:07:38 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a271be1fbdbab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6947,"size_decoded":3287,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6946)","md5":"661ceae031b0d59dc2f3beeac0ae7cfd","sha1":"3b7e9107ffeb21d0c41bfdeef7118ea9d58be07b","sha256":"b270afc5f9df7bcd9239c22857fb1511bba1398a28b1c3548272d720cb433c62","sha512":"b9630a50fbf1c6db29b47246715f640bdc24ed2d268627305989e615be4999fac0d8cbbef4336c2bae701eef903554954566e8dc23a6d623ddf7cfedffbaa062","ssdeep":"192:04fDU0pA7KQisEplEXQI5AuTYafgbNCz1Rx5NFKtiF:jfDU0pA7KQi3plEXQI5AygpC1RnK8F","tlshash":"c8e11a9c723075790877ada1e5ff3743f233a563a881e0914219dd802dac98f42abddd","first_seen":"2026-01-07T13:13:26.365481Z","last_seen":"2026-08-13T19:43:03.861497Z","times_seen":13591,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":6,"connect":15,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.215Z","timestamp":1786058117215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kualianq.com.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 02 Aug 2026 10:34:00 GMT\r\nexpires: Mon, 02 Aug 2027 10:34:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 391277\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-13T20:04:26.712595Z","times_seen":31946,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":36,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.220Z","timestamp":1786058117220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kualianq.com.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 105204\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ToLwif8%2BMcYP7nhsD36ou9Bz4XgIYKbU3sv7cRrQeSATQKjr9iSgS%2BIWPVY8DLso53vznR0SkG8OgQBt1eXf6%2FYMneyPJQwciegJZGi%2FccLo2Dj3bB9pKdznfZ6ekAjilmJ%2FNA06\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a271be209b370883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105204,"size_decoded":106194,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 105204, version 768.67","md5":"ee91e640b5449fb98d9320c877a9866e","sha1":"7fdc6b3926b1dd023f9f2ad7d53bc22694694281","sha256":"33a252d6393cbd6debe0ac517229c7aa258a0ee68fc0253f8be6a7cee8b65ee9","sha512":"b787d1e727c77e85de52fdedea16a719be00cfabf739f44451a2a35db443900e8b3178db1ddd5eae9018850888b94994343e9b1e15873cd0211dae83c405bd3d","ssdeep":"3072:iCoiIfDOunK2Bl6QvzIF5yXX8VLDNmketBSxyr:8i4KAl6Q7uZVPNrezSxyr","tlshash":"5fa3127e92467aa9f063409bb432b85591504f43a26b14ea9cc0d6bedb1f3ff46450cf","first_seen":"2023-04-08T18:01:47Z","last_seen":"2026-08-13T18:26:54.075004Z","times_seen":5450,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/sms_code.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.253Z","timestamp":1786058117253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/sms_code.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 360829\r\nlast-modified: Fri, 10 Jul 2026 10:42:16 GMT\r\netag: \"6a50cc88-5817d\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":360829,"size_decoded":361078,"mime_type":"image/png","magic":"PNG image data, 550 x 550, 8-bit/color RGB, non-interlaced","md5":"dc45c489c2fa4735f9cdf2f4daf8baac","sha1":"bc0d666e6b44d9e377a246ed2f53f5289b784243","sha256":"f12ffb3675aa4e12783a7acb9802d5369f3bd6ef427da26bc567295c7990b542","sha512":"9ba2b3c17704f3473c1d31f6f79cc979ea1f5c5399aa21c942480ae8486f49e1a039b882fe9ba0e0088b491b3ca43851b28f19f0ac8b3f8b2fad16adf22bb567","ssdeep":"6144:z9Q8m99/v5HSrYD7c5+R7nl4maoFhu56wtOIgpVopXICvbOKCxpyx5dCP+g8F9Mf:hQ8m99ZH5fl9DS56sO8NzOKqyxbCb+FQ","tlshash":"ee7423e73f6c259528a80413052fea980fc35ed8dbb87de1734017f119ab8e627b5b19","first_seen":"2026-08-06T23:14:27.791361Z","last_seen":"2026-08-06T23:15:52.305249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":472,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/global.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.255Z","timestamp":1786058117255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/global.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 126971\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-1effb\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126971,"size_decoded":127220,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x1200, components 3","md5":"b45a1a668157034a7e3c8c2a9b691443","sha1":"733a9d373c1cdf897f85a7b72ecd99bef916580c","sha256":"8ba197846ca1ae6d43c7992282db9b6f277e473b395bfcdb44c50b09aca64736","sha512":"480b61132a876a110b7d86418e98a2f94c2834f1c84f214fa62b46440c4edd45eb6198e5667a4445b97d8ea75f4526ae4f620b1ff98cb6c7cdcf6d484520ef87","ssdeep":"3072:2GY2XyPaiqH6eNd/ZYJjJJYQCBHgeVDF5jo9XT:C2XyPcaeNd/ZYVHaZggF5jAT","tlshash":"c0c312928c098293b9ad2df7570b9a391dbe340ec13eb867ddf60e84e90d091d99453f","first_seen":"2026-08-06T23:14:27.779909Z","last_seen":"2026-08-06T23:15:52.31222Z","times_seen":2,"resource_available":false,"data":null}},"time_used":859,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/free.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.257Z","timestamp":1786058117257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/free.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 524434\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-80092\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":524434,"size_decoded":524683,"mime_type":"image/png","magic":"PNG image data, 1024 x 500, 8-bit/color RGBA, non-interlaced","md5":"fcd2e8c4a36c24a8506b5621bcecc43f","sha1":"355d67a293f0d47acf0d86896ece972769bc80ee","sha256":"b59863416e50c55893c84c32c5d28345133c91234b58ce68f093558e166bd7ac","sha512":"e67d7ec31ee3345dde1a0144c6cba8e1b513dec51e33abf8fc94cb62f2b5f15dedc7fdcc29eb0cc56a7e909364e66591bcef88069dbca76e937853212b50cc46","ssdeep":"12288:mfLB5ctuQfx01CJNodjD+p7FsNN94Zlc7iCt66bdBYx34c0h:QB+gQfx0kJNoNDqBsN/7iCt6OPy4c0h","tlshash":"86b423fb15e25e038e839d55ecb21edb64b29a6c179f392b74e4d25e049b362f24c0c4","first_seen":"2026-08-06T23:14:27.784372Z","last_seen":"2026-08-06T23:15:52.313082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":968,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":484,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/privacy2.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.259Z","timestamp":1786058117259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/privacy2.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 57454\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-e06e\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57454,"size_decoded":57701,"mime_type":"image/png","magic":"PNG image data, 750 x 458, 8-bit colormap, non-interlaced","md5":"2afbd05eb636dc4dbcd01b9e404628a8","sha1":"4c8be2efe83b76de7b5538412803cb0642cd06da","sha256":"1953b0438e45444afe8f9191a41c261c1347283f8f2c44b5f984e6a6ef9f923a","sha512":"7ef040de562b79207f083b4b41216d40f084c997a61dafca3e1c021975b806df333cae65a206917a7037a1f7674490b6bfce4ac7d257f037d2100158573da7ab","ssdeep":"1536:EIGtOBPLrrUt8cBq86LVAJpxEC2gK7n/MSK:a8B+qg52pw","tlshash":"7443025876a71609a7b7c9823bb5a4ce285c23c2e0c3463ac07914f735d1a8c6ac8b6c","first_seen":"2026-08-06T23:14:27.785275Z","last_seen":"2026-08-06T23:15:52.314677Z","times_seen":2,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/zc.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.270Z","timestamp":1786058117270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/zc.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 97440\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-17ca0\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97440,"size_decoded":97688,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 772x585, components 3","md5":"fe505f0da4ee0cd02cf7a77433a5df7c","sha1":"fb6038ed9b1e05b84e5e1a5c2e4490a0cef8fa34","sha256":"6e7474b1e0f76a6157cba1c01c2426f1daa616329d49331bea0736076b950ee2","sha512":"577d781646617bda5f1bfb921d65ce0e2fb9f81494739ae9faefe9a04546e1d6dd6780775e51d1d344430fd33d91bce978e2d3fca5a39b1894496eadc24d8a51","ssdeep":"1536:bBkRVqvrlpeMGvBbmKQGdCGW0lI77vNkWUNDosaKXTayhjWXV+KL8f4+3I:oWvQuGdHI773UNHaZyhjWSAH","tlshash":"6793cf17062ee359cc97e96e26c2078b7a1e5068d7b43d9fcd49713da46a8877ec034c","first_seen":"2025-11-01T03:13:20.297417Z","last_seen":"2026-08-06T23:15:52.311424Z","times_seen":7,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":408,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-regular-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.223Z","timestamp":1786058117223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kualianq.com.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 23760\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aPuwWx1gtIwH1kQAScZmlfxswsBpmr6R%2FZiRpcMFxdbnD00b8Lp13ZhJMYZ393beTZeyZrZkC8QfWNXa7YRUFR%2FPIwW37H6ECz8iyLvb2FPC6ZvAeu0dbYbxb%2BT%2BoYj%2BDjAdI03b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a271be209b3e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23760,"size_decoded":24749,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 23760, version 768.67","md5":"82bafee9dcc7b6fb7bca7ed323f9b7ae","sha1":"ffd3b574cb7db4e2cd0cc2ea9214f0bb8989207f","sha256":"886fd1e6ce992ede514743a826fa71fefdb577047a2a899ca95f6f28f3305d09","sha512":"eed2562b9ddeceb57207e22b35f7f1aec302d644fdde0341da707fbe9a66eadb740ca002adca2e88f9f2c4f68a7130a24173a7447cd9b9494c0b33ca96a18039","ssdeep":"384:r4oOXVLO2ts2lnr5RhC1mlS2wqqM8C2P2FXDnB7ZzjYj0iJkBi7Y37k4bRBscb+q:oq2tN1fU1mloqqbNeprzjYoi+TAQsgQ2","tlshash":"97b2e139bcf2556688811dbfa931308ff52af474402196e03bef797ac1b8b44a153b82","first_seen":"2023-04-08T18:01:46Z","last_seen":"2026-08-12T13:37:00.990393Z","times_seen":6401,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/switch_node.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.244Z","timestamp":1786058117244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/switch_node.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 15363\r\nlast-modified: Thu, 16 Jul 2026 04:39:06 GMT\r\netag: \"6a58606a-3c03\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15363,"size_decoded":15610,"mime_type":"image/png","magic":"PNG image data, 1000 x 610, 8-bit colormap, non-interlaced","md5":"4acd85fcc8e22626a603e4c531d714cc","sha1":"46d8f76113fa84364830c0ed80d3b5043740a854","sha256":"81e2633f200f8c2cd099c288df48eeba405f186aeef4e8d7f95d447fb42dad79","sha512":"9856bba896df0951a2495767316fc854a2053a20eec5d7d667edcc21e9d38bdab835109be7a307dbdbafa05641f5de6392c5c768698ded301f3a18308eebf293","ssdeep":"384:nTThwznMhA1NJhaBLIYtVudGlNV6TFehS3:TVanMhWaCYtVNrV6TQ83","tlshash":"0f62c0a22f252b0af1b33c39d261e1d65641dee261e7749203cf95096dcb96434c8ff1","first_seen":"2026-08-06T23:14:27.781711Z","last_seen":"2026-08-06T23:15:52.31593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/speed_boost.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.248Z","timestamp":1786058117248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/speed_boost.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 64397\r\nlast-modified: Mon, 13 Jul 2026 08:13:22 GMT\r\netag: \"6a549e22-fb8d\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64397,"size_decoded":64644,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1024x887, components 3","md5":"725b0c2e8d73ee3f8fb7969c164e25f9","sha1":"d52d268fbf93cb8edc71b54d507a13e8cc39e63a","sha256":"4bf53f5db10a299a4ccd2fb20ef0b8131ff3e00add99e1da931eef317b6c7591","sha512":"b179dc9948a532372d463c3ccb8ffcef6ff19f67a51f39c53703212ba1eb1b84bed1a4f18fa1c2ad223c9d8b9f9f6bac745c264af02e29f665a0ae399711fa56","ssdeep":"1536:3V3daT1YZvNm1u/qWnqBjIqoUSBArJ8/gzztlvEXWf6ZMTVH:3V34T1+lm1u9qBj9oPArJ8/og3MTVH","tlshash":"3053e0a7f5725212fa28d87160dc82f6e75132dc1303f292a13bc17a6e55258afcde0a","first_seen":"2026-08-06T23:14:27.798234Z","last_seen":"2026-08-06T23:15:52.316528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/split.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.256Z","timestamp":1786058117256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/split.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 146162\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-23af2\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146162,"size_decoded":146411,"mime_type":"image/png","magic":"PNG image data, 750 x 458, 8-bit colormap, non-interlaced","md5":"9dfde2730ef0eaf11d9c9a47153d73b8","sha1":"a5e06aad662442e153e3c6a36b61a3fc1680baa1","sha256":"0e4b2be842ea2441b4e432df1d74a0ac64929cea10fbaf48d0ab9a2f736947e2","sha512":"8fe453c9cbb99d4e2ca952a1b41868e5532a069f377a6a6e45f2b9e4019c7da97a2b7ccb2d68c3fcbee9a2ebc04c3db2f70b3012b65ff2e2befdc61d9ef38ae0","ssdeep":"3072:IuPRaIkElStmnZXzfOuwPCSon6nCIbGuW7pVJWdFFfcb1:vRn7JnRTOu+CRn6gAdFF0b1","tlshash":"3ae312846c43cd226069388027a9fc8e8e09ad49f745b99413f45d4e6aedfa30cfe579","first_seen":"2026-08-06T23:14:27.803554Z","last_seen":"2026-08-06T23:15:52.31715Z","times_seen":2,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":435,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/fwq.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.269Z","timestamp":1786058117269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/fwq.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 57454\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-e06e\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57454,"size_decoded":57701,"mime_type":"image/png","magic":"PNG image data, 750 x 458, 8-bit colormap, non-interlaced","md5":"2afbd05eb636dc4dbcd01b9e404628a8","sha1":"4c8be2efe83b76de7b5538412803cb0642cd06da","sha256":"1953b0438e45444afe8f9191a41c261c1347283f8f2c44b5f984e6a6ef9f923a","sha512":"7ef040de562b79207f083b4b41216d40f084c997a61dafca3e1c021975b806df333cae65a206917a7037a1f7674490b6bfce4ac7d257f037d2100158573da7ab","ssdeep":"1536:EIGtOBPLrrUt8cBq86LVAJpxEC2gK7n/MSK:a8B+qg52pw","tlshash":"7443025876a71609a7b7c9823bb5a4ce285c23c2e0c3463ac07914f735d1a8c6ac8b6c","first_seen":"2026-08-06T23:14:27.785275Z","last_seen":"2026-08-06T23:15:52.314677Z","times_seen":2,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":331,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.ahrefs.com/api/event","fqdn":"analytics.ahrefs.com","domain":"ahrefs.com","tld":"com"},"ip":{"addr":"104.18.39.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.317Z","timestamp":1786058117317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analytics.ahrefs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 08:12:36 GMT","end":"Sat, 03 Oct 2026 09:12:08 GMT"},"fingerprint":{"sha1":"84:19:A8:CF:39:BC:A7:8F:39:1B:79:AD:F4:E7:EA:E6:42:26:CB:EF","sha256":"4D:2C:16:B8:0D:0F:8E:F9:F7:1F:1A:EB:5C:92:79:A4:D4:44:A4:45:81:47:22:9B:5B:AE:2D:5D:F7:6A:D4:FC"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: analytics.ahrefs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 219\r\nOrigin: https://kualianq.com.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":219,"data":"{\"n\":\"pageview\",\"u\":\"https://kualianq.com.cn/\",\"l\":[\"en-US\",\"en\"],\"k\":\"Pd2inu0LPT8McjzLRpHzJA\",\"r\":null,\"sw\":1280,\"sh\":1024,\"sr\":1,\"t\":\"快连官网_快连下载_快连官方加速器 Windows/Mac/Android/iOS 客户端\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ntraceparent: 00-27dff78314f1412eb979862c0233348e-df0df5ecf0214f09-03\r\nx-request-id: 82da957f-7148-417f-8350-f83317e1d9c9\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: a271be214cc356bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":467,"mime_type":"application/json","magic":"JSON text data","md5":"1bdd82600d2859af8d96bbd39fc8a3a1","sha1":"8d876d917ce9efdda1bfc85727d421ab541a7861","sha256":"d42d95676a5fb59c33cf368c1c8fc71930805c1f4111bb007f02ca6bc05ed42a","sha512":"7a500f01a6c98df1379077a6768bd2e2451fc5f05703ce6577162d21869eceed475dbd288e8dfcf9dd6753ef1a15a0ceb121f4e0100e5a6c346b64b86506715d","ssdeep":"","tlshash":"a150000f000000300c000000000000c03c3330c300003cc000c00c0c00030303000330","first_seen":"2024-12-12T05:05:27.500171Z","last_seen":"2026-08-13T19:43:03.848945Z","times_seen":21355,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"019f6426-9a9e-745d-9277-a52c8316ea50.spst2.com/api/report","fqdn":"019f6426-9a9e-745d-9277-a52c8316ea50.spst2.com","domain":"spst2.com","tld":"com"},"ip":{"addr":"104.143.37.101","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:18.905Z","timestamp":1786058118905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spst2.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 09 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D3:98:35:11:65:78:F0:C2:D3:6E:4F:2C:34:61:33:6E:F1:2C:22","sha256":"24:7D:84:49:9D:5E:D5:0E:E3:47:03:D9:66:58:AE:BF:7C:B0:17:51:D4:D7:35:BA:A2:16:5E:BC:F5:1D:A5:6D"}}},"request":{"raw":"POST /api/report HTTP/1.1\r\nHost: 019f6426-9a9e-745d-9277-a52c8316ea50.spst2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kualianq.com.cn/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 205\r\nOrigin: https://kualianq.com.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":205,"data":"{\"payload\":{\"x_report_cache\":\"\",\"website\":\"\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"url\":\"https://kualianq.com.cn/\",\"referrer\":\"\",\"fp\":\"f6f0cb9bda24800f2081ff5af3aba40e77357e608f1d3ab8bac50a6c1c996cfe\"}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Thu, 06 Aug 2026 23:15:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 330\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":330,"size_decoded":524,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8154d4c26800ad97ba8d2613541ce93b","sha1":"86629ef89441dd7c147436349ec841c1021f1ac9","sha256":"7a5a66d0518414d8a877c89bdb66357030f97fa7b44aceccfd632b227329d528","sha512":"ea89d6049aa3b940e3b7db41970de00fcd5d5e858027c2b130aec8b9eec324758aab5e4ff6db4cae7712a7a76d0a10cb553596e92ee1c4a3c4292c5d658c1c62","ssdeep":"","tlshash":"00e0c01f4b2b5e7972e27541bc0dac84e58816d306a31030a1d044c09c0710e6317870","first_seen":"2026-08-06T23:15:52.318294Z","last_seen":"2026-08-06T23:15:52.318294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":0,"dns":0,"connect":217,"send":0,"wait":219,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.211Z","timestamp":1786058117211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kualianq.com.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 02 Aug 2026 10:34:00 GMT\r\nexpires: Mon, 02 Aug 2027 10:34:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 391277\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-13T20:04:26.712595Z","times_seen":31946,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":20,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.217Z","timestamp":1786058117217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kualianq.com.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 02 Aug 2026 10:34:00 GMT\r\nexpires: Mon, 02 Aug 2027 10:34:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 391277\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-13T20:04:26.712595Z","times_seen":31946,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":29,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/check_status.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.236Z","timestamp":1786058117236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/check_status.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1224947\r\nlast-modified: Wed, 05 Aug 2026 04:01:58 GMT\r\netag: \"6a72b5b6-12b0f3\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1224947,"size_decoded":1225198,"mime_type":"image/png","magic":"PNG image data, 1100 x 1100, 8-bit/color RGBA, non-interlaced","md5":"1caf8872fc5e25f5c52e960fe4cbf80e","sha1":"09b82b0ebe57e9956bba83e2ee79cedce952d330","sha256":"0093291cac4e65c20e2b8ea445a166bb5c2e736b2b1cc913108b07701804d29a","sha512":"d84b622a47e4468a572d7731d756de77d0018d6c58fd06b4a6365ee6ba2ae320584adbfb582afa11e625419588fde24cab2efe54d341b75a4b67c593d7c3f99b","ssdeep":"24576:XWpDFXkoaCRlX3S0wAmL2VTPngmfsNqFaUz70Nk3PtrjUG:XWp1klCRlndd4msN2Tz70ur1","tlshash":"6b2533d8ec6ec4f1f819775af514baed6d43c11c2e7910092d83e4682767a23892afc6","first_seen":"2026-08-06T23:14:27.786924Z","last_seen":"2026-08-06T23:15:52.297944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":758,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/device_limit.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.249Z","timestamp":1786058117249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/device_limit.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 39807\r\nlast-modified: Mon, 13 Jul 2026 06:44:25 GMT\r\netag: \"6a548949-9b7f\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39807,"size_decoded":40054,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1000x610, components 3","md5":"12e7f31e9252c75973ada559524c7223","sha1":"943a24ebf3c999b74f8f428815ed0b4d35faf835","sha256":"19da20663571ff7e9f71f67ab14619bbe420b60488b49c58c44c81d27593fa16","sha512":"94aa2cd54ac3a7c5a1d64364e9cde116ff9898717a60a78ec8a13f881ed34aa0fdda9d94e5a40af3453f8b597c9c57c863350609f641666fab04703ce16be438","ssdeep":"768:klN6DOk1Fw0fLMeJoRRZYvX0Y5hgRwW8xoWKjpj0GM9E9YTgHMIBm:u6ak1pjXoRnYx5hgRw+KK2tIA","tlshash":"8003e179952a1c3ed7a1c1b6e0d179a0cb21e91c23b16b50b7228d43746b29cfdb9788","first_seen":"2026-08-06T23:14:27.788664Z","last_seen":"2026-08-06T23:15:52.308041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/service.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.261Z","timestamp":1786058117261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/service.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1224947\r\nlast-modified: Thu, 09 Jul 2026 17:48:01 GMT\r\netag: \"6a4fded1-12b0f3\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1224947,"size_decoded":1225198,"mime_type":"image/png","magic":"PNG image data, 1100 x 1100, 8-bit/color RGBA, non-interlaced","md5":"1caf8872fc5e25f5c52e960fe4cbf80e","sha1":"09b82b0ebe57e9956bba83e2ee79cedce952d330","sha256":"0093291cac4e65c20e2b8ea445a166bb5c2e736b2b1cc913108b07701804d29a","sha512":"d84b622a47e4468a572d7731d756de77d0018d6c58fd06b4a6365ee6ba2ae320584adbfb582afa11e625419588fde24cab2efe54d341b75a4b67c593d7c3f99b","ssdeep":"24576:XWpDFXkoaCRlX3S0wAmL2VTPngmfsNqFaUz70Nk3PtrjUG:XWp1klCRlndd4msN2Tz70ur1","tlshash":"6b2533d8ec6ec4f1f819775af514baed6d43c11c2e7910092d83e4682767a23892afc6","first_seen":"2026-08-06T23:14:27.786924Z","last_seen":"2026-08-06T23:15:52.297944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":550,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.212Z","timestamp":1786058117212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kualianq.com.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 125064\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JRcwQUkIvmW39D742x%2Fj8qlmJgdbBKPlH%2BJWSYLDXEdqrXHnMVkmAiRxP7%2FxZr5RcbX1kURWDs8LwfpHPqYfnHHTetS4JLQdi8t25mC6DQGkdlInxOUKp%2FHWl%2BTxWXto6Yh4d%2B3x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a271be209b340883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125064,"size_decoded":126056,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 125064, version 768.67","md5":"57b380d27f14f16e737bcca7e849cf79","sha1":"2e4280929d4d76fc0e31601c98f167f14630c209","sha256":"94e1bbc1c2a41ebc73fa5253fd563256c0035b4d69181e48f9aef9e474a11251","sha512":"88dd2321cc4711333411a24dab612daa68caf7cc31c892405bcbb9e89629ca15fcdd781bb26d7485f5819b5b48170ec8eaa2135701f4695cf94a1cb0c15bf649","ssdeep":"3072:W0ZXsLdN0s2s3suUQwuHn6XEedsYoDAEMUdAgofJ:W0OdNj10uHwsYoMHPg+J","tlshash":"b0c3122be28d689365654613aedd23ae1e795b7d8c4b6315c1bb3046f7ac7b83003b13","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-08-13T13:39:42.230897Z","times_seen":15298,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":7,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/contact_service.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.237Z","timestamp":1786058117237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/contact_service.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 67812\r\nlast-modified: Tue, 04 Aug 2026 02:43:40 GMT\r\netag: \"6a7151dc-108e4\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67812,"size_decoded":68060,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"a38ffc4587caff8e6caab87a97a9a9a3","sha1":"1ea4f795bbf11e0b490dbf10f302052de149a255","sha256":"794a213454e6c1a8b74b20b0cad70a8c5f33405ab7f6ed6d0ffbcdade904cf5b","sha512":"df3c0be102c672fa77d48d7dd1d768ef1376513c6d8dd7c52241950d0b0648ce4c6b651fcaffbefe835063204c90d78a4c7563d643d370e199422e175b8c3191","ssdeep":"1536:Z7PekF7oCxS+CPqLn5xkS8N9Bi6j+Zz/h:hnxSBqLSB4x/h","tlshash":"e763f1a71962c84be349c43a4c9156377a4ee3d3a038672cef5927280d7f6b4ab47634","first_seen":"2026-08-06T23:14:27.790427Z","last_seen":"2026-08-06T23:15:52.302703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":423,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/connection_fail.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.239Z","timestamp":1786058117239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/connection_fail.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 46719\r\nlast-modified: Wed, 29 Jul 2026 03:07:49 GMT\r\netag: \"6a696e85-b67f\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46719,"size_decoded":46966,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1000x610, components 3","md5":"6873af0d8840eb271b17b9016d8515b3","sha1":"a6e87b0cd1b5d14bb0bca05087129e417d750ab9","sha256":"e2326a6a0be5206de0b12edfc400c2ec0ae0c32c15703aefaa94b599c40484c0","sha512":"9f66fed3d20828ad5bc65adea4e4569effd4b566c48817bdd97cdc01ccb438dace09b72f3abc7161376cab05b85d27a7f96e408de8b1e909911c26a438ebfe27","ssdeep":"768:BStzktCiRdedkA4CewEnFRZCcuj1skFX1Fd13WG5+tID7KGz4NdSu5FtI3/6yO+p:EFDPEnFR7w5XxWG5+tID+Gc/7nI3/Z4s","tlshash":"2a23026766817f6bd511bd700a68de501829bd4a291a5bcc1214bee80bf9f3c8cab94c","first_seen":"2026-08-06T23:14:27.801219Z","last_seen":"2026-08-06T23:15:52.320284Z","times_seen":2,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kualianq.com.cn/tp/forgot_password.png","fqdn":"kualianq.com.cn","domain":"kualianq.com.cn","tld":"com.cn"},"ip":{"addr":"65.75.210.123","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kualianq.com.cn/","date":"2026-08-06T23:15:17.243Z","timestamp":1786058117243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kualianq.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:46:54 GMT","end":"Sat, 31 Oct 2026 07:46:53 GMT"},"fingerprint":{"sha1":"6B:89:84:F7:05:5F:D1:59:A5:6E:16:8D:BE:17:32:20:62:C3:94:5F","sha256":"9C:BA:86:F2:36:63:8D:BF:48:3F:9E:84:29:4A:3F:C2:A6:E0:CE:88:67:8C:1E:33:25:E9:FF:E6:73:66:A5:DD"}}},"request":{"raw":"GET /tp/forgot_password.png HTTP/1.1\r\nHost: kualianq.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kualianq.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 23:15:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 47353\r\nlast-modified: Fri, 17 Jul 2026 04:45:11 GMT\r\netag: \"6a59b357-b8f9\"\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47353,"size_decoded":47600,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1000x610, components 3","md5":"8ffbd6729f334ae1c1f0f30f77bc6556","sha1":"a4fdacc6fc88f691b8fe63d78434a5527798627f","sha256":"c827775374a0125102f6d4dfc77d53c49e03c34435176cdb435874d8579ba067","sha512":"c7c792b824503630d1027188ab8f4a899210c9c31cda39f1e129b97bf482c73dafa1a7af96139c401e073291bc32cef7fd9fbbb44d5d5d065d024839088d1acf","ssdeep":"768:2ayWfwp2mdO7wCxjVIA9GmoyKIia6VSyWB/zjp8Ah/TMqYMcv0IotoRavyTO86E5:2aysa28XYpIe1oy+a6V4/t/1UtRRDTOs","tlshash":"9b23f2d56ea89017ed9f097ad0c14d25fa30fd7c580aebc1f119aaaf4cf570ab44a350","first_seen":"2026-08-06T23:14:27.777894Z","last_seen":"2026-08-06T23:15:52.320905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kualianq.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}