{"report_id":"040be533-2343-4ef8-bd16-6b8b5f319c30","version":6,"status":"done","tags":[],"date":"2026-03-06T09:32:20Z","url":{"schema":"http","addr":"lnshshnxsh.net","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"104.21.80.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"title":"lnssxsh: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrencies | Gold | Oil","dom":{"size":112968,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57673)","md5":"979b6c00ea9902bf550dee1bda501e36","sha1":"1e24587e5a70b4bfaefd6ee1ab6468f931f72f4b","sha256":"ffe981b1ffaf6b5c738e90cfaf36fca32d5ca86d3a06748a7e53c13ff9815762","sha512":"bded940417378a1aa88875ab60fadcaa1767f201ac6f38c465a41e6b1da8dc6f9344832845b1bbb192c4a9cfd1c3079b26eb30cd59ce1ef60e96f978d18d8bf8","ssdeep":"1536:7Rsdd8oi5MFEnHZBRZB4Abz/s1rnkRAkRAkRAkRAkRx:1bn5BTBYnkekekekekX","tlshash":"37b309bc711207ab29b31299f571be1aeda6ff4fc6069e0876ecf0021bcac309955570","dom_hash":"domhash2da634e58847f4c32a4d27786d58293c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lnshshnxsh.net","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"104.21.80.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T09:32:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":4,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-06T09:32:02Z","timestamp":1772789522,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":59716,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-06T09:32:02.646335+0000\",\"flow_id\":1425154421968893,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.51\",\"src_port\":59716,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":910,\"bytes_toclient\":6037,\"start\":\"2026-03-06T09:32:02.086013+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-06T09:32:02Z","timestamp":1772789522,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":59718,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-06T09:32:02.660831+0000\",\"flow_id\":1272799047078022,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.51\",\"src_port\":59718,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-03-06T09:32:02.086150+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-06T09:32:02Z","timestamp":1772789522,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":59732,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-06T09:32:02.879435+0000\",\"flow_id\":1144860561254177,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.51\",\"src_port\":59732,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-03-06T09:32:02.337697+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-06T09:32:03Z","timestamp":1772789523,"ip_dst":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":59724,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-06T09:32:03.912804+0000\",\"flow_id\":1553389260514937,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.51\",\"src_port\":59724,\"dest_ip\":\"47.79.64.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":5,\"bytes_toserver\":984,\"bytes_toclient\":4662,\"start\":\"2026-03-06T09:32:02.337529+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"webapi.lnsx1688xsh.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"lnshshnxsh.net","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":56,"request_count":28,"received_data":6982970,"sent_data":12630,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"webapi.lnsx1688xsh.vip","ip":{"addr":"172.67.158.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-16","domain_rank":0,"first_seen":"2026-03-06T09:32:24.059397Z","last_seen":"2026-03-06T09:32:24.059397Z","alert_count":7,"request_count":7,"received_data":60443,"sent_data":3817,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-02-12T08:38:00.929095Z","last_seen":"2026-02-24T15:47:19.278204Z","alert_count":0,"request_count":2,"received_data":52824,"sent_data":1021,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cservice.vip","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-08","domain_rank":0,"first_seen":"2024-10-08T14:49:36Z","last_seen":"2026-02-24T15:49:31.098827Z","alert_count":0,"request_count":3,"received_data":67663,"sent_data":1339,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3d62ce07ea2410ebc7ab30b0f631a654","sha1":"e025312c90e1e4e541666aadb19ac3d6b5373820","sha256":"80efa2fd8bb5dfc8af8f25a434f2548643e1fa6863f4891bca2db217aa43793e","sha512":"227ddb7c993249cc1cf11638b431fd90e151127c03cf5514fcce7e0c66177a8b985c30f23d617da781ee92a1f38f43eff13a7e1710cf100da192ed6b5f54b9b5","ssdeep":"","tlshash":"23c08cc5b0c72e002a8275945eaf24e4b034c82bb08c2b538dd4d8892e230f89237ea8","size":159,"data":"","first_seen":"2025-12-18T00:45:38.459982Z","last_seen":"2026-03-09T15:15:36.302058Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b58bc5d09e78ee97ce127d3743acf7cd","sha1":"a5321050c1717de2c7fda0f9b51ddd4545fc4bd8","sha256":"b8c2b18ad81fe2794dec033f836b9526e9feb5610129a4fca80a4f73e877b377","sha512":"db1df40517bdea2950461d37c0022b60f47dbaa33fe9413f8333e7ae25ed7dbc5955a8c0a3cb863824b2ce069c40b3e95ba3242187fb5a8f7c78e37a8bb52e7d","ssdeep":"","tlshash":"c3c08cc4f0e33e002a02a420a0af34e8903440a6704c3b129da8ec582ea25f08233edc","size":151,"data":"","first_seen":"2025-12-18T00:45:38.454098Z","last_seen":"2026-03-09T15:15:36.310053Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a7a62101054a07c1bb663cb1bb96e730","sha1":"b5f61a388ccee33592c65ba31f56c0db8483d4af","sha256":"11e55da9e155cd258e3ea566ac97780f7e14e68a392084b32d2f975fbf6aabdd","sha512":"f561f5f35a7055063302ef42d002f4645cdc2156304652b7c28db8ee71ac60bb6ae9e6b14a629ab90d03fec63fad3642631b42b804c070874134f558505d6bf1","ssdeep":"","tlshash":"08c08ce4a0c66d006602651022af39e49024802a70486b029ca4d8482e630b08233ea8","size":146,"data":"","first_seen":"2024-06-12T10:12:11Z","last_seen":"2026-04-16T15:50:50.255938Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cservice.vip/js/ai_service_diy_646frp7q.js?v=1761548374","fqdn":"cservice.vip","domain":"cservice.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb993b2fa0cc465145c4199c9e422c63","sha1":"725f83ef83bca7a3f2ce74613d592db3c8c2683a","sha256":"edbc211f2b6bded7f14b9bcd6ada492e96e9c18ea41a5d889ca1bd6ed050242a","sha512":"02724bdf32eddaebf99fc2c4e1b8cdf833fddebd73322a1a19d654e454d5322e687071eee4961211b46612b71d77f4a46ac48edab07b173bbc10cbd2ca5187fd","ssdeep":"","tlshash":"c631c0525e99c5b31933322a9b3bb128ff3127131a02aa033efe57009f31d45aa65ec5","size":1810,"data":"","first_seen":"2026-03-06T09:32:29.632244Z","last_seen":"2026-03-06T09:39:26.966117Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b6ce6947773085721278649d83b7c3a6","sha1":"b7f4faf6b6844009b50c7040221f81e2dd940612","sha256":"3054fa372c7d3e059513dd7d40bb42eb6b91fc3e13645798cc0c1a2dd5705ac0","sha512":"bb5e544490a8cb2c26506e397d028fd28ec3c8bad4dc479e0b487aa0126bb969fd394c5c960923ddf13379b27aede44ea9a1a97c8d951416ed9e7448e8ba2148","ssdeep":"","tlshash":"c9c08cc8e1d23d20260a661120ff26e4a034406674485b1b9cd4d8482e620b09333fa8","size":150,"data":"","first_seen":"2025-04-25T08:37:00.641817Z","last_seen":"2026-05-20T11:13:03.236836Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ede74e75dbb1611035cd62bfa1a0eea4","sha1":"7cfa11d8edf07d4bb08b50c42bf6f4ba231de047","sha256":"a168e5a14ce863e89bf7c1f53d38e408cac6e90cea284765b67eaf21c1f5c54c","sha512":"b655977f3dda2959b29e9cf51ca8694f25bf3368b1f0f615933c8d944dc9bc9f72b7ffb8777c264c4e09dff09d719dfcee74efd45d7b20ba02a9d671ddfc5e75","ssdeep":"","tlshash":"40c08cc9b0c33d007a06681454af35e490258427704c1b028c94ec492e331f08233ea8","size":147,"data":"","first_seen":"2023-06-07T15:49:18Z","last_seen":"2026-06-07T11:56:06.462977Z","times_seen":556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"003aaa34c0e3e53213656d2672de5843","sha1":"148bef3d1cae038554629d9e7bb0d6c5ca00d0df","sha256":"ab3c1f6b212fd128cc3b06d7289aa24268eb1047caae48ef63121e5564870d01","sha512":"98d4037233f6536194128b2dbfd1023a8ce379a6e3164aa6a5930550027e1ae22c07ad35ef962865b13ad9a550fc49f21bdb0fc2ec28572304d2885b94cb438b","ssdeep":"","tlshash":"13c08cc4a0e37e102a02641150af25e4a028402ab04c1b528c94e8883f730b48233eac","size":150,"data":"","first_seen":"2025-12-18T00:45:38.456988Z","last_seen":"2026-03-09T15:24:05.462035Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/vendor-B7IM__cc.js","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"06d058b4fd23927acc5662e43f93f62f","sha1":"cdca549f5bab4ac036c308ca9fe6dffb97066558","sha256":"55d6534567b17d36c336cdc83fac44d584a86a4a9baaaf4bd1c482086ab6e61d","sha512":"1f430058676a40efdca5c4564365ccf511a7acbf46719e5a27699e0edd4b1a01e6f3838706cc1350ae461eb3f3550c3054028f9cede06896dc9352db2838b5c6","ssdeep":"1536:nyp4FfPoBgIA+vstBjefSVf0vzCcGiVe5KQ2aZlluO1XqwlcsptOVf:yCqBgIGjeqVf0vzNREKQzZXuXsrSf","tlshash":"8ba308e93282b06253ea09e7007b4015f33a1959380e98d4f16daddb3d7744a91fbe7e","size":106003,"data":"","first_seen":"2025-12-18T00:45:38.392145Z","last_seen":"2026-03-09T15:15:36.23408Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/main-CqCaFnTF.js","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48a86f1a71bcd36ea81775bb0aee279a","sha1":"a1d0a07cd082b7c52541b559843f4ce1c0f47caf","sha256":"051bc7fbba72e96f7be9426ce86b14bcf215a3f0477ce6c5c879120b36772018","sha512":"c130ec5974170d317793d16f22a25d655bf676af8a85246576ce564caa739a36967947c187b54871aa265e55ae0cce7863e7dcbe1be52a5ab3dab6a18a79b7d6","ssdeep":"49152:eUBAx68SMNK/1fBiWplEQoIe3bHttU8OgGQzuidQrmTdQqJVAx89FwDDw4UsZCHa:2YGS3TA2","tlshash":"4746ae197342a1f857f3419260bb0505e2382f89b453c49cf9ed4cdb2a9ad6e737a738","size":5716340,"data":"","first_seen":"2026-03-06T09:32:29.646243Z","last_seen":"2026-03-06T09:39:26.988687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"28df29b9078c04f370ea117f0cf5623e","sha1":"8971460b7518981bba20bae3b0f5f3aaa5da92bb","sha256":"1695c3e8018ec74d22ea8ed6104c6e04e66ef9a4edac3d5a4a1cea4e1764dd05","sha512":"d59293fad87212dd1ebd3013d63b52be7ba1817776687978815386cc897e1bbf16555f4524caaa53d3229cd66d2742eb95319e46dcbe295400f6feacc1bdb4a3","ssdeep":"","tlshash":"12c08cc8a0c33e105606686019af34f49028402a704c2b029dd8d9582e220b0a233ea8","size":147,"data":"","first_seen":"2025-12-18T00:45:38.439407Z","last_seen":"2026-03-09T15:15:36.28333Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"80adf127d675f8056e20db451748a2aa","sha1":"b190990b1148c68adf01f039fbb9afcaba84c6b8","sha256":"7f280c2b4c4402736eef5e78a03a4e60987ff9a3f5ebcaeaa7f06e6b3549606f","sha512":"3b199f2b32b5c4fc6280237a345e44147bddd64d935dbfb4cdd6e69ecb81e94436548eec6d0e5ee8d6fab83194be3096b2e66fdcba685420549c1644992a40db","ssdeep":"","tlshash":"54c08ce4a0d62e106616691018af24e4a024402771481b428d99ec482e220b08233fa8","size":148,"data":"","first_seen":"2024-04-05T15:11:03Z","last_seen":"2026-06-07T18:30:53.002203Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"44f88d3c80bc09fbd14220a62070b132","sha1":"1c38a981d97a9e216b99105f6471778d52b7c906","sha256":"061d8a59280c9eecabe48f52b4d84827bc9bee91f9f71eedcc42da5e154f1aad","sha512":"10ef249d374fe212f3e40bc809d7cba6903d70b1133ef257295a6399e9c69b753418719d889af48d0c2ecc8e475bf582a9003b09e5834e336d870d1b689681be","ssdeep":"","tlshash":"dfc08cc4a0c36e201b02691011af25e8a0248426b04c5b43cdd4d8482e234b48233ee8","size":146,"data":"","first_seen":"2025-03-17T15:48:28.332542Z","last_seen":"2026-06-07T06:59:16.068536Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"45e98c7a4775eaa63cbcfb9ce3651408","sha1":"01067eb99033adca3416bd76299cccf1e0e5eda1","sha256":"5f04448d59ce65e6f33b972a2f3bfc4c86710f40809278f7d1728191b2fc7373","sha512":"bd3352f420ace97c225effbecc4e6b78e43d9e83342bb89225362eed2dd897b461fd73c8e39b5c9a1a0454403d6188f92ba7d708e02c049e46845bdafc85513f","ssdeep":"","tlshash":"16c08ccdb0c32d002612642150af69e49028406b74481b028cd8e8493e620f08233eac","size":148,"data":"","first_seen":"2025-12-18T00:45:38.470763Z","last_seen":"2026-03-09T15:15:36.304384Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"183dd93ec0ad779e8c27fd420037824e","sha1":"43858129580c7a1e702217f4af30d6462839832c","sha256":"c1e015df9f10d49fc2434b80d1c7141c726992f2effaf5afbdeee9c8722e61c3","sha512":"7915edae0f3f40c22d2661317908ec93152915ab9801af70e7ec9c7fc30f45b35d453a06117c1a42e044c7a3fa9ecbb0bbb85aef62af93c92f44f3cdf358ded1","ssdeep":"","tlshash":"dfc08cc6a0c76d1276066a1470af3af89028402770481b978d94e8483f220f4a233edc","size":158,"data":"","first_seen":"2025-12-18T00:45:38.441085Z","last_seen":"2026-03-09T15:15:36.274461Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c896fe06d9a7e47486eaaa4696f01887","sha1":"a4f04141387204d4964916f6c2151338d26c004a","sha256":"54b0ec33af575a4f55be5cd937bdcba5a584aca4c49e4f1f969c742d0c061ebb","sha512":"7e2abfa331d281dc3b356d6e4950e38df3983f68fee3795086843241cfa200ef2b229b6371eaa30e31c9f55ba15ba4912865fdf4c7509ad3163eff717056527b","ssdeep":"","tlshash":"5cd0a7e8d0a77c0123195732f05f6ae4b02a4426a595151baeeef4983967070d33ff59","size":238,"data":"","first_seen":"2025-12-18T00:45:38.467663Z","last_seen":"2026-03-09T15:15:36.292756Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"334c1df9d7cbc3519a286d40bd5ca18b","sha1":"4fdfd44666132f3539c0c90fa78b7abeff651ced","sha256":"0e24d6adc0a7c495e77fb86233ff7417053d1262b0fd0500c3e449a7ba621673","sha512":"2bf2f7bdb7821f75cd98877cf9f6066fd0c8dc2997bc9a26ec3206b8501d4cd6a189f960f8a4c8aab186a295d509eb0df47a8d13e9c73afcb90e87a1447f581d","ssdeep":"","tlshash":"b6c08cd4a0c22d002602681010af34e490244426708c1b03cc94dc983e220b48233ea8","size":141,"data":"","first_seen":"2023-09-10T00:20:07Z","last_seen":"2026-06-07T20:41:05.685618Z","times_seen":1490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"170a0a2adabfa3df9f178716bf942841","sha1":"ac6457948b3f8142f8fbe331f13bf702b7e0a54c","sha256":"45bce9e470f9daf35851b9e83b496ddfeeb7920ceda2b2881eeaa512a9188eec","sha512":"c47f0ea38e1ebf1cf7a21d511f80eb073f3eb84d44c66a4881fdcc9f704dcbeb98b1380fd8336998eb01d4dcfe3ee8e685dbc3982bf0e1fefaf9964238689567","ssdeep":"","tlshash":"12c08cc9b0d22d106a0a641464af35e4a02440a674481b138c94d8892e630f09237ea8","size":148,"data":"","first_seen":"2024-04-05T15:11:06Z","last_seen":"2026-06-05T14:59:54.201842Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/i18n-DSxhgdy5.js","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"97812a0a2406068e45ea3f6ab284ddfd","sha1":"e567ee4fc7c1026e52493305a5910a79c30db199","sha256":"7ae7c6d75550841b5b9c9fb4028d13e14a6f12a0894b827accc8bfb96df674f0","sha512":"cf75c4142545fc00894ec259718b6ae7cd165aba2b3861ec81c2b5b3379c0b4df870e010854bc5ef564ea0a4a36d29a5ba14cb34b016b574a04f52343ffdbf73","ssdeep":"768:yjQiGhPNpnRHADEsVoXVLfftjE74t0DlQ/Ak0qVdKa5NcaGg4v0w63ODa7rgEiX+:N7Uq0+/YjQ9vau7K8uVoV","tlshash":"d153f7d634c7b012977a56e760b31005ab3e1b19340ed8a4f1bcda873e73d1a82a7f59","size":60838,"data":"","first_seen":"2025-12-18T00:45:38.401592Z","last_seen":"2026-03-09T15:15:36.232977Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"740c0bbdd3eea0ddf49799cc054669de","sha1":"14da5c0a2be4d92a41f7e047f0d96bbe250a61fe","sha256":"498cf069fbdb51dfd7b126dda9b48baa1766b13129360e781f1aad064f63f640","sha512":"267cf7a4506385ccb09aec29f352e1f3edc03e517bcf7297bdfb31b7d685d5736d7866e853aaf792c9c604981c754df6177aa7ab432d67e6551fcdc5749761c3","ssdeep":"","tlshash":"87c08cc4a0c37d001a02681050af28e49028442670481b028cd4d8482e620b48233e98","size":139,"data":"","first_seen":"2025-05-29T09:52:53.500165Z","last_seen":"2026-03-09T15:15:36.276387Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e76698900cc074c118273ee128d84c1a","sha1":"7b3590bcfc29dc2519904ccc4ac8c97116824196","sha256":"35cb0d66de3213ee52d20af1896e1ac687c955ee94f808bb46617ccf672a0a48","sha512":"45c928a6dc08ce34e9886e957a461d113485f49e1c0438ef2e15405b9e79be3218d1abedcf0e67d4678c67521f0483b7fdfc56a5ca07270bd961b4c0e95d351d","ssdeep":"","tlshash":"91c08cd5a0da6d011626681454bf35f890244027704c1b12ec94d84d2e230f0a237ee8","size":149,"data":"","first_seen":"2025-12-18T00:45:38.431849Z","last_seen":"2026-03-09T15:15:36.299129Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2d2fae169b0836a7d2ccb486577b0cd","sha1":"f07925168f1059572c55af4537da849e346020c8","sha256":"23c290f84eb88837dd3ce8c179f71da766e8a0d192c3b1f478f4e5a6929d792a","sha512":"86722b8208bc5d003f4e11c82bc76539e65d988c478b1e58b79388a08f497d1713bf96e715ab22cd44d6db5849c15879da2f673a920839129f8e3a2deef9acdf","ssdeep":"","tlshash":"fcc08cc4a0e26d001a96641220ef38e49024442678485b46dc94d9983e220f08233ea8","size":148,"data":"","first_seen":"2025-12-18T00:45:38.455228Z","last_seen":"2026-03-09T15:15:36.280008Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"fbc4535837e4b66304063b672a89d710","sha1":"08e4f0d983b92af61639474f049dd0aa01164366","sha256":"c2cee43bb19be2e32f4ab66ac25217f46cb450051fc9c4039cf4bee9eda1f4a9","sha512":"1c29392ff9fba4a70b305c1cd37398bccf5f74e2e8147948e9fd645b07cd592308ee2e8f931aeb601d41832c1dd2d5bca9e3d5c91139e5cfa0d8ff4964722081","ssdeep":"","tlshash":"74c08cc4b0d63e002602652020ff34e4a0244026b05c5b829cd5ec682e220b49233e98","size":150,"data":"","first_seen":"2025-12-18T00:45:38.457941Z","last_seen":"2026-03-09T15:15:36.284118Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9987407846fd8eabd00ea05dc2ecc796","sha1":"4f8b8d95b45a1d4e58eb84976936e5809ee5446e","sha256":"fb8d04341753bed114d0854467ce2bed6fc49a26d6532c5992faddae0ebcc45a","sha512":"f804da9331a0b1dfbe45c5e41a73159b8528331bee480d67970e20557de1a9a2b43f1529c2e9e463a623733d1af0511156623d32222df974c8f5c5f372e03992","ssdeep":"","tlshash":"89c08cc4a0c62d001602681050bf24f490284026744c5b428cd4d8882e224b09237ed8","size":145,"data":"","first_seen":"2025-12-18T00:45:38.458818Z","last_seen":"2026-03-09T15:15:36.301318Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"62a1e8914589074aeac2f019badf6dab","sha1":"ad932b414f7682b714945d7437c6435d455e3b3e","sha256":"b1dc5c64fcc6dcc5ffa60a53a5290dc4d63c925e1061a5eb1dbc434d8865fbef","sha512":"6b781bd1266d2e59e7c47ff7387110014db6dcbd474150ca7341643a097841ac79f131dc7e9082c547909ecd2ee7d44024b9b4862bf039cf2dcc88226c4dfc6d","ssdeep":"","tlshash":"71c08cc4a0c33d002a26645814bf26e490384027b04c1f029ce8e8882e220b48333ea8","size":151,"data":"","first_seen":"2025-12-18T00:45:38.466611Z","last_seen":"2026-03-09T15:15:36.303604Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"75613a75df7083d017312b7f8e7980f6","sha1":"31f2c42a87ea52c4c03fe31d5f4954d67e97df7f","sha256":"635369d81b2562052574b75c31111eb0f556348006ffc95ac0a2bf393ae1c10f","sha512":"892b8609a63fb9dd10a53f88701cae4a871f38e8062c6e5bbbc78bf4e90590e55052ca800df675c4750743dccd2f3db90f24a36adea5bf124a6a058b2415cbaa","ssdeep":"","tlshash":"42c08cc4a0d22d002b02641051bf35e89024802678481b128cd4e8482f230b19233ed8","size":143,"data":"","first_seen":"2025-12-18T00:45:38.469771Z","last_seen":"2026-03-09T15:15:36.28089Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cservice.vip/js/ai_service_core.js?v=1772789522761","fqdn":"cservice.vip","domain":"cservice.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f18eea0d33964edbd612d61f5713fd75","sha1":"93dd1f6594dcf0f7cbdb44813e4c1f2072961533","sha256":"1bc28f480d9acf22346a0cc22379fce4b7971d6e647a55de5919e641db5cc597","sha512":"5cb694ca839128e6683a513174761ccf1c4147b28d130dc1425112756d81ee61a2c65baa2272e8284264a53ba658a4f77c1753291163dcc4fc5745b0538c5931","ssdeep":"384:m+6aLTFONgSMQDbHer4p7JCA8GaHOdRUHYAnUjZpeZgy4F4Syec71gAQ77/ZMTtY:5xTFeMQDbHer4p7JCA8GMOgYAnUjZpeS","tlshash":"a48241abebbb10724457b4368b9f268435268013294cde203facded04f52a675317bf9","size":17618,"data":"","first_seen":"2025-11-30T14:17:39.769051Z","last_seen":"2026-06-01T14:33:52.182505Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"94318a58e4b9a3aa0b22dbbf37d0ab90","sha1":"ba9e535b20fffb2ad169446cb161365678260d9e","sha256":"520800d485a3a066bd5196ca0ebc1ce86cf0bd39908cf644a3460c99be833614","sha512":"122a8aba1141ea39d597fc9e7b8ab2d72e57a52be0899ff0141b657cfad30cb5be369dc04b07edc437df4aa91e1a2ea0a8fb76525e59c3b574a5db96fe4697a7","ssdeep":"","tlshash":"11c08cc4b0c22d002602641020bf29e4a024446670485b128d94dc482e634b08233ed8","size":141,"data":"","first_seen":"2023-05-08T02:54:43Z","last_seen":"2026-06-08T08:32:29.211748Z","times_seen":797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f5fe0787cd8e0ecbcb4cd952894a8b7","sha1":"d43628197fcab15076d66a35b34fcf121e313189","sha256":"cb48ecc1b44293573353b165ece68d9f1fe13f50556b5f8d3ae683fc5a9b619b","sha512":"ccc2d734bb0f275c05eb1ce6db8049e726211a3785705442496d241b2369dbd0c739d4ebbed713c3883ca59708b6bcddca34c1c23906cb487f15580bf6744452","ssdeep":"","tlshash":"01c08cc4a0d36d101622ac2010bf24e490244027725c2b028cd4e8492e630b08233ed8","size":144,"data":"","first_seen":"2023-10-05T08:35:43Z","last_seen":"2026-06-08T01:43:54.967612Z","times_seen":1113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e4a7b557a6bc7119eb92d3bca7fc187e","sha1":"3b5640116e7240ae869461b4a46a52b9764e5041","sha256":"e28559aaa8226d127b0422b6ae5f5f021a92f31da8979cfbae0d0bb49aea6dba","sha512":"93480da7d288d56df5147d57185d3f07a81e855381e580f4a18822c27b5b50d75fbeed06debc986a10fb0bc743e0e97ca4e159671aee2e5a799a790c9339c5d2","ssdeep":"","tlshash":"9ac08cc4b0c36e101692681010bf2de490348026b48c1b038d94e8492e630f0c233eac","size":146,"data":"","first_seen":"2025-12-18T00:45:38.476066Z","last_seen":"2026-03-09T15:24:05.464333Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4622509a150e053c1344b22744b58831","sha1":"a8a7b9e8d00b9cc82f016f0d136a4437f0f790d1","sha256":"b00706366d4d1f1e32235cbbdb1e78be0915dafb6113693290c6dcd87a01e32d","sha512":"a9e188eed78a011936d3e1f0cf064c3da6402a76093aea7f6655832d13bd073e92deba7a65ff234a49b03b0abdb78a25c02147eaa642ade645ded8e2dd574229","ssdeep":"","tlshash":"efd0a7daa0d2691815535011607f3dd450289422794c17a59db9c89c2a721f0d177fdb","size":231,"data":"","first_seen":"2025-12-18T00:45:38.43516Z","last_seen":"2026-03-09T15:15:36.306041Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"168bf713b6ad99518735899b0eead7c6","sha1":"700ed06f2ce59d58bcaa84312fb16ec077a4fcbd","sha256":"2968ccaf0f67d1302bd3b46e0746476dea68a5f4a40a73c1f62cf6f640c8da95","sha512":"eb05f4d87e1e5ca6d115fdc4ae1cf76ded8201557fcc3bf3fe29ed3118bb01eb00d3709d6d3b05e89035f8093b1c22e3ca62d9041e8a23c2b21d406386553514","ssdeep":"","tlshash":"dbc08cc8e0e62d202616661250ff26e4913444267088ab1bac98d8483e220f08337fa8","size":155,"data":"","first_seen":"2025-12-18T00:45:38.481598Z","last_seen":"2026-03-09T15:15:36.279069Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a7b3de7354307d425e2c87cd30f4ede6","sha1":"dc66414ea415cd874318119239b4af134ba2567b","sha256":"6ce792f41f1371f6d74e42988b05237acaaaf3eabaf18d6f6c7b56b2e58c4823","sha512":"15313ff7e64d913b8e7a1bc9f0802d26ec31225c1e0be7fa325315bc6cebe8d5e070cba2c58e83993c461951180bb947eed81bd1bbd165015772906c7b2599c9","ssdeep":"","tlshash":"73c08cc4a0e23d001602641010af24e8a0244026704c1b028c94d8882e220f08233ed8","size":136,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-06-08T00:50:34.112938Z","times_seen":846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cd0f0767c8e84e2cfefcbb6357248d1e","sha1":"c3e0a6eb03d21a394eab70aee55366a3178d78aa","sha256":"c0f44df086902103698b27947a539ce2977460487a59aa2aafa2f0bd5667cb00","sha512":"e78dfd4a137b24c2987358b3ce244e9ddf18bb0d3b0e9d1e8bfdb41551f05d6ed96d67626d9cf1d7980479b96a18e4473a9e26f5bcbdf46ba1cad7006a1b323f","ssdeep":"","tlshash":"13c08cc5a0c22d205606665010af3ae4a028402ab0481b028cd4e8483e220f08237e9c","size":149,"data":"","first_seen":"2025-12-18T00:45:38.46866Z","last_seen":"2026-03-09T15:15:36.287493Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"35bd91ba9eadd9c1d6715805a33a3521","sha1":"2c6150de70e399e0ce5023075c4936c70bbab66c","sha256":"53e3deb4aaa8f3ec248b25d8e37406c521926b5df185bf31fbfa9be4fc914730","sha512":"28dd1200d9875043c1e990b49da139e1dfa4887b646943888ca4c54910ef66e59f71255973d6245f7aff3d5775944f07e66fe3a51d37a2d6a4465437ad889f19","ssdeep":"","tlshash":"2ce02689908834111b421200a2efa8f2e025443ee75c0b529ca594a81e242726377d98","size":306,"data":"","first_seen":"2025-12-18T00:45:38.434121Z","last_seen":"2026-03-09T15:15:36.27822Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3f25544c703b5069d2e247a99c2cccbc","sha1":"842509e48b0b34006a78d3935b2e1112775435bd","sha256":"1436a199ca6fb3e760dd3244bc9e5f8a2aaf91cd33c6b58a60a093a8ce54a065","sha512":"e02e5331170ccbea51e69bd876535c2e08418343a5d7531dbed8d84d1190d702419c40688743cb83bb62bacccb10dc2e387a4048da30785f405d5a8195efe26f","ssdeep":"","tlshash":"89c08cd4a0cbad005682a51015bf36e4a03440267058ab139ca4d8482e230b19233e98","size":149,"data":"","first_seen":"2023-10-16T14:25:23Z","last_seen":"2026-03-09T15:15:36.288214Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"34fe4ae570036e85b5a70944dc34681c","sha1":"6da3b974c96447d0aa68086f0e22078efd3f491f","sha256":"d6189af1ffd9226e40da8dcddb37ec738b1085c5c093af023f7b7667c1969b64","sha512":"e98f5ae46a462a83a57dd557cc5aeeb03d893f329f340f3d13822f182d36cee4413d0d97b010e23c1caa2033216d201cb72f8c34fa1c833414fff314d9848737","ssdeep":"","tlshash":"c7c08cc4a0db2d10aa06759415ef29f49024442ab05c5b53cdd8ec983e220f8a233ed8","size":161,"data":"","first_seen":"2025-12-18T00:45:38.436192Z","last_seen":"2026-03-09T15:15:36.306803Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c5d7f6a8ecd91ebf6cc974297f65c918","sha1":"33887bc7c32f4f1ca776e2da09a07ecc28e7cce1","sha256":"73f2d76b712bcad7f6c8699c180afd8cb5e44451c9a8005e4e8b5818a99dae6a","sha512":"91cac552941ef0df049023c4f9fb67c51f0782eaaa9dda76d4109f1435efaaf4991886d0eedfb47e33c508fb3b05b44cc946fa1877dad879398a8071b67a02cc","ssdeep":"","tlshash":"65c08cc8b0c36e00160264101aaf25e4a028402670482b128d94e8483e230b08233eac","size":147,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-06-08T07:01:32.2262Z","times_seen":2979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"da6f96e28f67a6157a3936ad9620e184","sha1":"2048856e2add65759547645f3d5b41f91e7b4321","sha256":"9e7533262f41352610208208fcd05bddb8400f22fb8c23679a5a58708612a0a9","sha512":"26faa3d2211fdc3a6ae217e658285f14822523bdad08cf3f71d691485d9427cf7b0ef8ec51a45009b6b3af00a5d9ae6b8026a0892fc017de748dfae3d9e852f9","ssdeep":"","tlshash":"5ac08cd4a0c72d002602681011af34e49024402670881b038c94dc582e230b48233e98","size":138,"data":"","first_seen":"2023-04-13T07:32:12Z","last_seen":"2026-06-08T02:55:51.745784Z","times_seen":1479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"111a92c4d66066afbac573d73ffac4bc","sha1":"e2591c0e1b889ddc1afb2a61ca1474c167cf46a8","sha256":"7cc231a763aedad035bcc99bd8aeb1ee8274f104b68da85a379472320a848d97","sha512":"898c23b421f5bc21b0ba1b3ef31df7f18a0d4c7606abb4e35706d6bf8fd17fec9e22d65ecf91683b91c7c1c8ccf276e8dd1c0485b675ac5fa2031f9b7b20d5a5","ssdeep":"","tlshash":"06c08cc5a0e27d0016126a6024af2ae49028802ab0889f468cd4e84c3f630f4c233eec","size":152,"data":"","first_seen":"2025-12-18T00:45:38.47717Z","last_seen":"2026-03-09T15:24:05.470438Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"48f2ac09e3fd5d5db6cf7cf14486adf8","sha1":"6a0c10940cd7cc259fbb766fe235f8b16eeb17cc","sha256":"0ebac074858812decd76be1eebb3c7a7e73deda11c5a9766b66427539a859d59","sha512":"d8fd5b7af4a468ad6d34aa0520dc5ed8d8a56d524f15a1343acecd84332c737939838236f3e0a228828162b09fb54bf74dd21655fd6764e6707a697a62767abd","ssdeep":"","tlshash":"5bc08cc4a0c22d101a02745014af24e4a024402a70481b428dd4d8492e220f08237ee8","size":137,"data":"","first_seen":"2025-07-10T00:31:50.561143Z","last_seen":"2026-04-28T06:28:39.942561Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"442e563bffc022a7e215e0dc3d1b7db7","sha1":"5e09092480598b297f6911114c3ec43b865dfec9","sha256":"9d9986257ac4d017cc380a7590baa2f07e159337a32ebd7a0d51c7dcb6e67d81","sha512":"24f7cd1cf8c3ec2183aba2c6f060d3ea7478b99505c63921287f9d49a21e8f1f7b5e88b1298d41a2b011c1bbfbe92467ff110385c04c80556eda6f828f99865e","ssdeep":"","tlshash":"96c08cd4a0cb6d005642651012bf36e4903440277058ab038da4d8882e230b4a233e98","size":149,"data":"","first_seen":"2025-06-19T19:53:11.38372Z","last_seen":"2026-04-20T23:47:18.155449Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/#/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"dc04525caa1a384f8f939f263003a2df","sha1":"7ee80479861fc6580a67757beae96ce4793168ae","sha256":"18ab5411c20c30007946f0636144273e8e2fdbe06da91b3c7d853280853b7c7f","sha512":"98faa9495858b9889876296f263173740963118b4be0618560c916497f1dfb4071c7fe322606d698a90c6b8a0ecd593e8530f0a24786e837ddb1a59cec4689c8","ssdeep":"","tlshash":"f4c08cc5a0d22d102606685014af25e49024803674881b028c98d84c3e220b49233ea8","size":140,"data":"","first_seen":"2023-04-27T07:37:24Z","last_seen":"2026-06-08T06:01:07.245832Z","times_seen":2828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/tether-ton-Ap5k4xv-.svg","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/tether-ton-Ap5k4xv-.svg HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 07:25:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa817d-2bbc\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A6%2ByRcQoKPN85hYDSpA3DlYrt5Ou3a4bUZokp8h39MDuFI8aa%2FwlzRUeIEj2uUP0aYHI65Ue2XapSJQcOjp1bJk6NCsSNGs1q28QM99U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc489090fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11196,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8a4c286d806645a1ae1bfaed7a93c15","sha1":"aa4eb6730dee726f3a25951f7e1092f705fe78f6","sha256":"b19ba08d6cd005c06320a27884e97a1d6f8358bec6469603a6728d28a221ed76","sha512":"94fcd2adcc80761d51b71ed36b3a9e7882d3f45ec67d1423ea7982dea6722a336ddcf69c821b8c183d9ef9945be1f1fd01ffe1ab4f3f786eeadc46578e85e1ab","ssdeep":"192:DaVTAcVqcfsYLMp+y3rQECou7Q7l569ZnwVXdAeJ0GaQ1btXZO9MQxIMOm/K0UOe:rcqcop+GrQEXuQ7r6cAeJj1x0yQmMOg6","tlshash":"7a32b8c4377ad3fcf401f6ee8b6570742d0a68dbbaa2c4b8c3721c19a5565ac4e498d3","first_seen":"2025-12-18T00:45:38.40295Z","last_seen":"2026-03-09T15:15:36.22489Z","times_seen":12,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Frame%208-QBBarmw8.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Frame%208-QBBarmw8.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-117e\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49103\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e9zNBJSpYHLGvOMcliKISvg%2B0CM%2BV%2FbPiWEYaGrepq1m9ww%2FJTS%2BHoqEgDuEsr1XaBgO1qYg37a8AWgAiUunCLZOqPkm7Z%2FKRU9Kjb17\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc792390fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4478,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"e7cfd72af14d344bb50ac6a368b99779","sha1":"6d04bc54730a8609351237bafbb0bfc98a07e131","sha256":"180400a26cb69fe17d05af323409d39541eaa734be725363518ebdfb431b8164","sha512":"f981285edc92363ec2c515204f81363c61eb8c8b8bee5cae16b48d9a90866f64e7313813ba306a5d0a9d93b45dd9d7f62341667922f5a4b6d52202ed3573a4e4","ssdeep":"96:fSpM9j52pIOAY8e34ByvkJ8Z0LasASip3bJBK44pv6mb2:fSm94pIOAYgE9S744pO","tlshash":"27917d9dc1239d25cde6caeeafa46ccd7c8d7f009d25726880a5247526040ec4b3e68b","first_seen":"2024-12-26T23:29:40.08069Z","last_seen":"2026-06-08T05:16:21.673094Z","times_seen":74,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Low_7-CXcIvExM.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Low_7-CXcIvExM.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:02 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 07:25:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa817d-44f6\"\r\nexpires: Sun, 05 Apr 2026 09:32:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeNJ4KEnvR%2BBk2xNzXjdwGK1aNglRoJyOES6J8wKZ2Rt17X9a3hWG7BliObqqoIkWd%2BVsVHKXf9p4HVeJZQOiH7acUayfrOvAvANHiWY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc893c90fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17654,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"8fb38101b080f0069632af23879f5d08","sha1":"2264f6840d544cc320b59f9861361125ecbca8e3","sha256":"2894d936fe42d3f8357e682c477c6d515f04b78e5b6efced7eba1c03b68f2d68","sha512":"5c45290fa25cd3cc00b06a44a1e11802bcc17b3a39395ab1ca17eb1fef7451abbc47343736a36b4359a3801c1e32a4d872285f9c1bcf76bd8dea8a009a61c17c","ssdeep":"384:Anh3XfgBbzg7igsb8vd81SJE6W/TvVqF9wj2iLFRQeNj8t8:Ah/sgoUq1SJEzTVk9uLItq","tlshash":"8f82be80621318a0ae6c964452be75bba9bf098447e8b0b4ccef8537b4747f9cd245db","first_seen":"2025-02-12T08:38:06.875638Z","last_seen":"2026-06-08T05:16:21.715889Z","times_seen":73,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":742,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/remixicon-BVvFtaex.woff2?t=1734404658139","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/remixicon-BVvFtaex.woff2?t=1734404658139 HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/assets/main-Dk5ff7tB.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 176812\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 07:25:49 GMT\r\netag: \"69aa817d-2b2ac\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5oEQG%2F8PUaC5gfhPx2e4ExUQGwgltybh2h6UuKDaXvPaq65%2F2plZjWHx%2BuM6xoNUl62Si%2BqMNeQji1KhbwKhELniX0nCckyYHwSNIM19\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cd1b1290fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":176812,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 176812, version 1.0","md5":"9f0118b43f57fc3ea9f55bbfb3a3b185","sha1":"f3ec7500bd2c615bba2de885d46bcaa91c20aa9b","sha256":"7ea90bbc7c505b98dd7d3a089a6fa32067e353150192951cedb05e26820936cf","sha512":"6a17cdb1c39d1638a2e69ac8c9cf15229d9f64ce9026965dd8e8878700994fd1db65f21be31e18a49ec36e0b0ca522d05ab7f3884b21a022d9ccde9795d0baab","ssdeep":"3072:8oI+omjEjOiEHbaa4yYDtZimTAj2QdJohF8EBGWXsL1u:8r+5baa4yYRTw2Q8C48g","tlshash":"300413f0eda0d72cd9c7fc12f48db606aa9c579475f790901bb0fef869ca4a8965c420","first_seen":"2024-12-20T14:28:38.376296Z","last_seen":"2026-06-08T04:55:18.229404Z","times_seen":1980,"resource_available":false,"data":null}},"time_used":1122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":569,"receive":553,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/platform/Inssxsh.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:03.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /platform/Inssxsh.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 06 Mar 2026 09:32:03 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMtAeVr7hQ8Xe8Z7jEEkIuI47uIpZZkB53XorDN1%2FVLgt2XSopEv4ozhgnO7ZNQmFNv7Um2WoJXj69dIb5Z90VOVEeIDP6ysYd%2ByUASg\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d8059d73cdc90fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58296,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-06-08T11:18:51.090449Z","times_seen":12183,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Frame%202-c2RTuPRh.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Frame%202-c2RTuPRh.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-1904\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49103\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NsIkZAcaPINIdc1ILtDwXULmM%2BVwLQfiK3%2FpGh4o%2FFkUqC5cPR3lTQWmoiEhMezC%2B4KoLiA0GSQCPHUC4tgMbH%2F1QyEgYr1j3rryxVAL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc68f890fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"c5f6ce860b906f355bed0f55e2ae2a88","sha1":"044d4a88650ebbeb71b5ba01dae0993e64ea257d","sha256":"2e5a4148f2f24b69f934319ce6e397de373ccdb3744307d44a9ef747973b945b","sha512":"98b22901d2a1829c6d1953b0a3ff3306f939e2966c166f9971a3a29a95c27c844627c3edeabc4dc7148aeb0a47b8e685e7bcc9abf756f179e5dfe0f563a95fde","ssdeep":"192:MlfDJ/atKb4jNpdL9w9mjidVbFTC7E+XNS2:QM04jNXL9w9vdV6X02","tlshash":"8ed19ef7971026a7fa9855c615356cbacfd4a6034bc72608013a76053dd6728ff0ba86","first_seen":"2024-12-26T23:29:39.991003Z","last_seen":"2026-06-08T05:16:21.693368Z","times_seen":74,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Frame%204-qWkfDJjf.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Frame%204-qWkfDJjf.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-20dd\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49103\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zSjHu5LcVlpQ84Yemhh50ddot6T39hekCHh5Rgc9khfFE9up8tz1BTdEJUdKMrwSbQTWK%2BJWLVFyz6g8lRRqgWJC7POOpz2d5f6iY795\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc791690fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"264df1bab5915017aa44a0e0b8743667","sha1":"bd97c7bd5c839e29446cded395805af0a08f9b8e","sha256":"841a45a62324a18518fb30f38f1c097827d6b9585c35dbd9856f94755bb15e0e","sha512":"483aa21467a4ae27ed9f2ac5a7b705e8483c6926a2c43ce8d116943faab02f1ed9943fbbb72926edd5d1a32ecca8ef00acee2e7b4c37714730ef88ebbe53af2d","ssdeep":"192:caJgBbRcbRgI/EZ+ZsoUSRZnVHdtda+gv6ah2:xgBbwxcKVdNdtb66I2","tlshash":"7802af77d5c6848c122ce2a7eb287950f21448011175d26cf6d81ed7e1bb93be937b0b","first_seen":"2024-12-26T23:29:40.054476Z","last_seen":"2026-06-08T05:16:21.665178Z","times_seen":74,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Low_6-BrdJwosH.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Low_6-BrdJwosH.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-26d4\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49103\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VU6mc29GhnnxzDzJh5Yz2Uft6EiiPuP0i9SB4qBdHZuFWlw%2F%2BvZVInQY%2Fa%2BU8goEoOUPA09IUyunTmzRaE0rquNJWmO%2BH3C0axb4%2FCw3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc893b90fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9940,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"f4e6adb95ea32bce12b23d17e5c0bead","sha1":"00ced7819afc7267f587e68ad7dfe84c7eec7261","sha256":"b13acac1bd74d72c21facafcd3dbf6bb44dbb271b23a0df6a228eb28b7e337c9","sha512":"30f9dc0634ab618910888f5b34671d727e6e853facbee428b3e0177cc0dc3defe2f26dbaf96997e6bc351c241335da5f320d8f97f034269987cb2e99b4a1c838","ssdeep":"192:fS71Xz65HFwfkYKFafIGQA0GIQuuUa3b5hevzXLOU/8Ea4FM5OCZ:KNzUHFwlyafIGQAx7Ua3b5hevzX0EXaJ","tlshash":"2922a04ab28e49fdfc8a605c80b78d78764c2831f333e6110480f6a653941f756f3217","first_seen":"2024-12-26T23:29:40.06096Z","last_seen":"2026-06-08T05:16:21.626854Z","times_seen":71,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Low_10-oM9rJNnh.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Low_10-oM9rJNnh.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-1e85\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49103\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PGT%2BY1aUAjNZUGe40I%2FhqakqqyqvVZZmYWU0X5J%2B%2FbsenY5L0z5VDkijE06%2B%2FM5dfLWCmp3mctuQgqBMvzH5ChwrKXzDrdwwzyu8PNh0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc894b90fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7813,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"ee91dd1f10c738a951cdd6d6f56c6d2a","sha1":"0f18b1339f62b322f0ca87bba04d7274d9cd6327","sha256":"66bca87cc8e292cc6a136f92fc1cf68f613195bc9b393aa90de3688565521bc7","sha512":"f6c643c252ea556ee6eeea30c1fec6bcb34682601d0dc99435acfd70ef1e48987c5b01a83d327343ba59a0f4ebcd5a49d3cd3b61db9a0c54faaaddc8c9a493e1","ssdeep":"192:fStX5dARBEEYxJg1L4f5aZzsPhY9706OTHEL:K5LEEEYxi1Uf6IPhko8L","tlshash":"7ef1bf40648a2e63661e7d48c2e0c5b557b655cf5338c35bad3210fd15e6281ee39ca7","first_seen":"2025-02-12T08:38:06.881528Z","last_seen":"2026-06-08T05:16:21.692793Z","times_seen":73,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Low_12-C1QilreQ.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Low_12-C1QilreQ.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-1298\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49103\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ACBQpQ9JoxNK8C59Fdss9sgV0fhNUY8ilfCG3AVsnnQNTsa9RSq5j5V6mkYTfRqe5%2FPmkVdATmntRHU8msTBIdmp0AKSrDbJRHVw%2BRyX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc894e90fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4760,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 87, 8-bit colormap, non-interlaced","md5":"96005bed58ee3407bddafa6c12707734","sha1":"c3220fb9384f290f2487bcca0acf38cb9dd90964","sha256":"53a0ff4b5ede57448da0e58c94ade19ef52a993015f4d06c556e5e1731c7edb8","sha512":"94d4d49ffaff9847318b6bdf7661dcabc080eee8fa4a033cb9fe7bccc2fa2235992f8cd3f42cb80e1e9d3520623d698183277577a7148739dbd2a3fd864e3eba","ssdeep":"96:z+5+dVokXu1S0zHAtRB73Hne4QDCvx65yOvOBkYK1+iL:z+5m+EoKNHne36x4yOkkJPL","tlshash":"bea16d969d8e8028e8e238b872d5f4edcd340134609bf20ab375ecb60cb50925d2fe42","first_seen":"2025-09-04T00:18:50.316456Z","last_seen":"2026-06-01T14:33:52.132083Z","times_seen":56,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.lnsx1688xsh.vip/api/option/rules/getTeam","fqdn":"webapi.lnsx1688xsh.vip","domain":"lnsx1688xsh.vip","tld":"vip"},"ip":{"addr":"172.67.158.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnsx1688xsh.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 14:29:18 GMT","end":"Sun, 12 Apr 2026 15:26:41 GMT"},"fingerprint":{"sha1":"E9:B1:F4:E0:BF:66:D3:74:03:E3:21:AC:9D:46:EC:D4:9A:FC:2B:F6","sha256":"C2:8A:70:27:53:16:F9:54:F2:4D:8A:BB:79:D9:6F:F9:20:F0:19:E4:2E:78:F8:45:94:EE:9A:58:DD:7E:35:71"}}},"request":{"raw":"GET /api/option/rules/getTeam HTTP/1.1\r\nHost: webapi.lnsx1688xsh.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://lnshshnxsh.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:02 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lnshshnxsh.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=54ykclJIaI8lnjP8HBWIpx724uyQSIJ%2FNPQVlzmrD%2FhODRaqyN2ngqOoZp1Q74pplHiVtLQwZffw87no7SOX6%2BnfnPCoOcn%2F%2BxEYUwUBJ%2Bq0Fp5gF7U%3D\"}]}\r\ncf-ray: 9d8059cfbd5ca3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6799a56f357e2db219241accbe6bed09","sha1":"2aebefc6f66a5ea206d6d721b13ee41644bb1e54","sha256":"45cd83f3d99b0527145fa4bc41694853be069eb203c3194c2b26a6db4ca4db07","sha512":"bf4ce72e43adab23eaf00a532171108e3f3754f238f189532dda6c074e7276c2bb8c93a10ae3fa36272ea68ba3f1485bcebe2b55706241e0614639f4e0d79e64","ssdeep":"","tlshash":"3680003b080ce88338033888000a0b0020e82080ab200300cc2c02388a08288a082880","first_seen":"2023-11-15T10:07:01Z","last_seen":"2026-06-05T14:22:22.198049Z","times_seen":59,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"webapi.lnsx1688xsh.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.lnsx1688xsh.vip/api/option/rules/getVideo","fqdn":"webapi.lnsx1688xsh.vip","domain":"lnsx1688xsh.vip","tld":"vip"},"ip":{"addr":"172.67.158.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnsx1688xsh.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 14:29:18 GMT","end":"Sun, 12 Apr 2026 15:26:41 GMT"},"fingerprint":{"sha1":"E9:B1:F4:E0:BF:66:D3:74:03:E3:21:AC:9D:46:EC:D4:9A:FC:2B:F6","sha256":"C2:8A:70:27:53:16:F9:54:F2:4D:8A:BB:79:D9:6F:F9:20:F0:19:E4:2E:78:F8:45:94:EE:9A:58:DD:7E:35:71"}}},"request":{"raw":"GET /api/option/rules/getVideo HTTP/1.1\r\nHost: webapi.lnsx1688xsh.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://lnshshnxsh.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:02 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lnshshnxsh.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ct5vU2TFdQGGkudLhOrnoeOXIxr8VZ2C5OQK4Sx4AbEKw3iA62MtNugxazrJRKQUvs1OeAnFSZ8e8E4nxQMq%2FaK2o50idb4NV4vKXn8QMp1Mie%2BFrsk%3D\"}]}\r\ncf-ray: 9d8059cfdd82a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"81ae7b078049a2219423ceba1954d734","sha1":"2cb328ea394c7763c33c127e3d5a03c2448b35d2","sha256":"3d08f73fd242a824c195d98c511c116d537c56670dccdcb6973f8e330d88bbf6","sha512":"098ba5c9515986f67bbec970e534f91f1d3d5270ae726eb215645bfbaf6c7337fe42aaa7c8c9b374740fbcbf22e4507122d44b6691f74f1c05447f9a2d6ef455","ssdeep":"","tlshash":"318004311c0cdc43740334cd4107474010d4305057300310cc5c5134c7041747441c54","first_seen":"2023-11-15T10:07:01Z","last_seen":"2026-06-08T05:16:21.713028Z","times_seen":73,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"webapi.lnsx1688xsh.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Frame%201-CUL4cChQ.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Frame%201-CUL4cChQ.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-129c\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49103\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNGgdnbN8UFVUB6S2GZvw3V8uFiDkMyUfdAhGJUS4TJhxllNKu1Msvc9K64Nx%2FXee6VXd6yP7dBVnaLbDLv5l%2FzPkoTq9VAPy1FCm%2Fqn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc68eb90fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit colormap, non-interlaced","md5":"8d212c8ea1591dfa2ba2794f71335ad5","sha1":"d4a46b85989a0fc68543d47374d7fb23b9533649","sha256":"db3891a7c41e37fcb3a5e36143a9c032486bdb2fa3baf924407a47b6a302e276","sha512":"ff704746c4dfe41083ec85ae9f9b807d3dc784b4055bd2ec149c4f8846966b55ee358218746f767e28c7778cdeadab955f976f4bc3c1e022320c7b0df88e34af","ssdeep":"96:Zj/zFb6cLBHNRnCWjwKWsEUW18YYbAcUsFXk8ZpRw:N4cLBtVCr9kAcpFDvy","tlshash":"74a18d25b470107e48e2d366dfae5cc200c4401e4c662fabd28a81bce28cb996473037","first_seen":"2024-12-26T23:29:40.085743Z","last_seen":"2026-06-08T05:16:21.723838Z","times_seen":107,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Frame%207-DhyADEO1.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Frame%207-DhyADEO1.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-11df\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49103\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AsKI42J7WYywkwv4EWS2Yv44qsDIIYmzWGcrs8U%2FboDu7eePhGtd7yyBSzIliaabsdxE137M0EBEfdpQbEFzEDC4hyKZsrmwCyP6mGRM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc792090fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4575,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"c32c604441f656c4eda637db0ce64fc3","sha1":"a936a84c35f34bec6296ccea1ca277ed492b3f37","sha256":"c1011c258b378ecd5b229f60bb4de768c1c1644d5e2acdca24076192b771d0f5","sha512":"552ee2eaef75d4aa9bc1cd49166d4aa8253dbe56488a325c4d670cc41f4dc88f424a2bc6ef42e190dbe651c90a9e0cdcc463fd6b6e778f17ec8a077ceeac0c75","ssdeep":"96:fSZLP23oemB7OTWDyKhsF40UKFEcHp4u9uXBIu++6at42k09B:fSJhxYEXsFLUKicKNR9++R4LE","tlshash":"09916c15efb1b3227f10ce36866a5811a71609fba54d20ae958d586c66143b37caf04b","first_seen":"2024-12-26T23:29:40.059828Z","last_seen":"2026-06-08T05:16:21.634604Z","times_seen":74,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.044fcef3fd6704d11a22c5c283233f82a.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:02.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.044fcef3fd6704d11a22c5c283233f82a.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 06 Mar 2026 09:32:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 25786\r\nConnection: keep-alive\r\nx-oss-request-id: 69AA9F134C8B373537ED7EBC\r\nAccept-Ranges: bytes\r\nETag: \"C0AA781E44E36E25BF5C6936A3732BEF\"\r\nLast-Modified: Tue, 29 Jul 2025 14:19:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10366709686187218770\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: wKp4HkTjbiW/XGk2o3Mr7w==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"c0aa781e44e36e25bf5c6936a3732bef","sha1":"c6cd8ace1371b5e04ca01f48013a2357cbb635fc","sha256":"d8aa19e4cff8a601b747f86fac67a0440c63c4da9321e731eab907ec72483fdb","sha512":"22f29f35e329f65d4f67c3efc8958ca21dd7457e8c12da141c8c5e1e923befa0bc188799c735e70bd354107dde7b663a15420b0f3cd4280c67223071f8df3a6e","ssdeep":"768:LQA2zQZHwOaP13iacRWL1XheS4Y7FFp+49PiGossg3KuEky:LQbQHVas/WLreShHqlD","tlshash":"30c2d056b1ed711ec8cfb9445848345eb8a25d3acc334a96c1c437438489e34aa5bbfe","first_seen":"2026-03-06T09:32:29.622581Z","last_seen":"2026-03-09T15:15:36.246506Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2047,"timings":{"blocked":881,"dns":41,"connect":278,"send":0,"wait":283,"receive":1,"ssl":560},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cservice.vip/js/ai_service_core.js?v=1772789522761","fqdn":"cservice.vip","domain":"cservice.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:02.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cservice.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 21:47:19 GMT","end":"Tue, 07 Apr 2026 22:46:59 GMT"},"fingerprint":{"sha1":"A5:63:FC:3B:CE:6F:DF:D0:D8:AA:87:18:27:C8:A2:B4:01:3A:99:27","sha256":"4C:2E:05:A9:16:CC:FD:8D:F0:D5:92:B1:5B:29:A1:E8:A3:D1:0A:D1:95:CB:2F:83:92:31:F4:55:56:92:B2:14"}}},"request":{"raw":"GET /js/ai_service_core.js?v=1772789522761 HTTP/1.1\r\nHost: cservice.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 06:22:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690d9033-44d2\"\r\nexpires: Fri, 06 Mar 2026 21:32:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77%2F0YeoSlWIgetGpM8ejo2VDhGQsq6s81RPnvrNAPCroYu4F3p3pfavB85kIRHVFzCUaO4oYLpaE%2BAKJLRSxfPRPeLfaWwRJ0dxMHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059d55bc576a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17618,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (496)","md5":"f18eea0d33964edbd612d61f5713fd75","sha1":"93dd1f6594dcf0f7cbdb44813e4c1f2072961533","sha256":"1bc28f480d9acf22346a0cc22379fce4b7971d6e647a55de5919e641db5cc597","sha512":"5cb694ca839128e6683a513174761ccf1c4147b28d130dc1425112756d81ee61a2c65baa2272e8284264a53ba658a4f77c1753291163dcc4fc5745b0538c5931","ssdeep":"384:m+6aLTFONgSMQDbHer4p7JCA8GaHOdRUHYAnUjZpeZgy4F4Syec71gAQ77/ZMTtY:5xTFeMQDbHer4p7JCA8GMOgYAnUjZpeS","tlshash":"a48241abebbb10724457b4368b9f268435268013294cde203facded04f52a675317bf9","first_seen":"2025-11-30T14:17:39.769051Z","last_seen":"2026-06-01T14:33:52.182505Z","times_seen":100,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cservice.vip/assets/style/css/chatStyle.css?v=1772789522761","fqdn":"cservice.vip","domain":"cservice.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:03.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cservice.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 21:47:19 GMT","end":"Tue, 07 Apr 2026 22:46:59 GMT"},"fingerprint":{"sha1":"A5:63:FC:3B:CE:6F:DF:D0:D8:AA:87:18:27:C8:A2:B4:01:3A:99:27","sha256":"4C:2E:05:A9:16:CC:FD:8D:F0:D5:92:B1:5B:29:A1:E8:A3:D1:0A:D1:95:CB:2F:83:92:31:F4:55:56:92:B2:14"}}},"request":{"raw":"GET /assets/style/css/chatStyle.css?v=1772789522761 HTTP/1.1\r\nHost: cservice.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 16:46:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ffa1e0-b303\"\r\nexpires: Fri, 06 Mar 2026 21:32:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0hU%2BlUlnog75%2FgrpSkkTEtFL11D4%2FvrQPY9bMkOk%2BXYG%2FqRWt0LJMaIPsSTi4PH9Hp%2FXyCxendyVQE6hEexq2AcQvRoLusRefmlP%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059d8fc3576a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45827,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1414), with CRLF line terminators","md5":"7f04d716a07903513dd26bdc041cded9","sha1":"87cc4821c93b3691c2cc6ed6c07504f9c5030d5d","sha256":"eca5ab3a8577e84adaf245950a20cb525d5c762c14576671dbcdfc9a46de476d","sha512":"f4a86fb88cfef3906b7debb45e8d4d02a58f4afbb14ff8479e630c3f8c84f97be7d3996d3e399f29498f31066c28fb7a63d8a83e00bc151686e434bf796cd0a5","ssdeep":"768:b8hjh3T4m4G4/4y738BY8+kJYcJHJlxGSndLcR4xhQ14YYi631N8VNi3rdwLcKda:Izr9l","tlshash":"b423433ceb65218da123b4a9bff16be5af514013df0b06a5b5f17a38c2504bd39712d8","first_seen":"2025-11-30T14:17:39.779365Z","last_seen":"2026-06-01T14:33:52.135698Z","times_seen":100,"resource_available":false,"data":null}},"time_used":789,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":789,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/main-Dk5ff7tB.css","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:31:58.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/main-Dk5ff7tB.css HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:31:58 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 07:25:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa817d-4fb76\"\r\nexpires: Fri, 06 Mar 2026 21:31:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=azWLXnRaTtehnTiMP5R2o6jbTTgm0jA745uGOWb%2F5GHQMW4Zxb22aKkTCG0nd23TLtQGhBkMVPCa1tQHEBCpTi%2FWBfwQnuZ2PR6CzoV4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059b7ca3790fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":326518,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (63286), with no line terminators","md5":"3a4ee2898003e7280f19427140bd0a1f","sha1":"f4d2c7c28fa81ebc08e04a3397e55d71b0811466","sha256":"194ec49aa5d18fbb00aa0e5ae194ffbba0b6e57bf492d565c1c61b94839a0325","sha512":"d5f28d478e6ad6943c7e31e30529c4d77396c62106fc02a6f16487d1f33fc5bddc9b87ce830235447d31045cd2b4657dd75a64d60a4121b02bf3e0c7eecd7585","ssdeep":"6144:Y7O3+Qkq7sIZ3k8ovFnZ+0GOa8/LhNag+J77MVnKhXSgGCXk0ANX4OED/Rx:Y7OO9I8Fw","tlshash":"5664fdbce28800e93b33d8a6c3b4778d6139f6b1da911d95f95b501cafc33a506d5e28","first_seen":"2026-03-06T09:32:29.624726Z","last_seen":"2026-03-06T09:32:29.624726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":950,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":763,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/main-CqCaFnTF.js","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:31:58.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/main-CqCaFnTF.js HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:31:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 07:25:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa817d-573974\"\r\nexpires: Fri, 06 Mar 2026 21:31:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVtCVgs7bvsUEuQl7w3tYphGqzaP%2Bt0Bwk6EesjoupnzNM92EbVgzie%2Bq3hkh6UxaEYcyQ4tmf8fvdBzHaer3AVQiBqVa53fiG%2Bwy0Rb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059b7ca3590fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5716340,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2c75d9e663f2b686e21a3f1a5a9428d4","sha1":"6b349c928f697a55520d921329f642c0297f306b","sha256":"7d3af9de799e4f6ab0bb47e063726c17226636651e326be5b1a7f2852c4d8919","sha512":"66ec0aaa0536c58a8ecde45e42dd694e15db729f7681375e3752f7e0cd0e764ee47db76b76f71c394d80714984f1f29c842b50635bf2cf19c330d00056c062a2","ssdeep":"24576:eUBAx680dMNK/1fBiWplEQoIe3bHttU8OgGQzuiGefwQrmcy:eUBAx68SMNK/1fBiWplEQoIe3bHttU8E","tlshash":"da358f4cb782f39407e351d164e71502f174ae85e58a80b4fbacc9ee11e9d8de267b38","first_seen":"2026-03-06T09:32:29.62562Z","last_seen":"2026-03-06T09:32:29.62562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":694,"receive":884,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/vendor-B7IM__cc.js","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:00.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/vendor-B7IM__cc.js HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/assets/main-CqCaFnTF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 07:25:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa817d-19e13\"\r\nexpires: Fri, 06 Mar 2026 21:32:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TdcLvBNPTyEF9kHG1ran3l4Rt744Zl04g3tFxt4s60s5F3iZbb3G1xoGmXjDYRnYblyfi1pQ1nJ6i5gMuPUvDN4ugssZRp%2FP1p8EPXK5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059c4bb1190fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106003,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33706)","md5":"06d058b4fd23927acc5662e43f93f62f","sha1":"cdca549f5bab4ac036c308ca9fe6dffb97066558","sha256":"55d6534567b17d36c336cdc83fac44d584a86a4a9baaaf4bd1c482086ab6e61d","sha512":"1f430058676a40efdca5c4564365ccf511a7acbf46719e5a27699e0edd4b1a01e6f3838706cc1350ae461eb3f3550c3054028f9cede06896dc9352db2838b5c6","ssdeep":"1536:nyp4FfPoBgIA+vstBjefSVf0vzCcGiVe5KQ2aZlluO1XqwlcsptOVf:yCqBgIGjeqVf0vzNREKQzZXuXsrSf","tlshash":"8ba308e93282b06253ea09e7007b4015f33a1959380e98d4f16daddb3d7744a91fbe7e","first_seen":"2025-12-18T00:45:38.392145Z","last_seen":"2026-03-09T15:15:36.23408Z","times_seen":11,"resource_available":true,"data":null}},"time_used":911,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":732,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.lnsx1688xsh.vip/api/common/getAllSetting","fqdn":"webapi.lnsx1688xsh.vip","domain":"lnsx1688xsh.vip","tld":"vip"},"ip":{"addr":"172.67.158.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnsx1688xsh.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 14:29:18 GMT","end":"Sun, 12 Apr 2026 15:26:41 GMT"},"fingerprint":{"sha1":"E9:B1:F4:E0:BF:66:D3:74:03:E3:21:AC:9D:46:EC:D4:9A:FC:2B:F6","sha256":"C2:8A:70:27:53:16:F9:54:F2:4D:8A:BB:79:D9:6F:F9:20:F0:19:E4:2E:78:F8:45:94:EE:9A:58:DD:7E:35:71"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.lnsx1688xsh.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://lnshshnxsh.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lnshshnxsh.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WSmlvKXpUdXSi9tC8mFFw4r%2BNQ1KKYHxqIw8qonag7iSUdssIRCtDJf7vfUeKEE2SiJBPheocTNQTUffk%2B8iyPcu0kp%2FVMi7isTrchQhtOtf4jOv%2BEA%3D\"}]}\r\ncf-ray: 9d8059cecbe7a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54080,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e97355102a6e4444c9ee0232bd961dae","sha1":"4e3d3be72bd5f8f077c4329089e7990cc20e25b4","sha256":"1c6e17cedb5ff3489df6c89c4f4a80eb0c3c27ee2d860587b68db2141db963b9","sha512":"9fe91bc6911e24036b30d121780396316c05783902c4b34789bb74a07b4098a35329b2deb66dbadff90a15b72e1e3834a3465e59592c9d02800e232e1165d50d","ssdeep":"384:wWzr4HscgvnjlN3tozlsm0W4KwUumME2GKNmRzKJflCEM7JJ5:wKEHRIjT3tozbKNmIfg7JJ5","tlshash":"7c33630ef054e8bdc79de8d500772a6b267d3c3beeda1a98a2cd0d0c43e9475851b71a","first_seen":"2026-03-06T09:32:29.627257Z","last_seen":"2026-03-06T09:39:26.964852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"webapi.lnsx1688xsh.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/player-girl-b0k2Fntv.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/player-girl-b0k2Fntv.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-2a30f\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49104\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4NaLVoGXdkNsyNeOiR13B1dIp9eZQObsGWNJzrB8nvIZXB9OBe9xCpotywKlsuRPkYvGs2a8s%2BzT2XRbMp0zJsw2bqkBFmm8u6ch%2FCV1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059d03b2690fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":172815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 851 x 984, 8-bit colormap, non-interlaced","md5":"c9aaf71bfdfe1c324eb4dbc50fa81a5b","sha1":"72be6e6b6d70b74e76eb928da68aeab95d4f3910","sha256":"40046f2ef357ac7de248467cb4df9d6d52b4ec8eb991b2def1c7781ee628efe1","sha512":"e2f3929794066bf49e618646845aadae51233ac9fe2e2a34547b08c3a38e9add6bff0dd9726bb26b3e13545fe3f8f19f700d6378fcbe83cc2b2999118777799c","ssdeep":"3072:kwJtJcOnA3KQ9PIeqecp3IRtyzHUenSw/HDFwVIM8tEJku:fvcOAjFqeceRIzdLFaIM8tEf","tlshash":"caf31253c3e8727a4824ebc7b81f01ff19d9ab7529692d0428ab6850ec0d0be6d5df0d","first_seen":"2025-12-18T00:45:38.414103Z","last_seen":"2026-03-09T15:15:36.24846Z","times_seen":12,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T09:31:57.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:31:57 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 07:25:49 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ekFitXFj%2B5Oyc2E7gem3iNR%2BO01EAV3isHTHOFCG2PEdUYI5kRp3rKlJjzq87OKzN7Q%2B7UNkTFe0DU%2B2wpvLt0SGATedAnsMA5%2BDwVzH\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d8059b37857f3c7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2156,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"d6f0fe72f867401221ba1b27d09d0f97","sha1":"f9b8338085f6d4fe514c592e0d8cc6cffebb9026","sha256":"ce9c0d26b7532b6869a772c2e12b939149c842567872c2d2bbdef3b5c54bdf0e","sha512":"bc41a4215a151d5d69878d2fe6fbd42112be9aa5f99405c019d8eb9e19e8e41fab1b7d9d4a5da9a7c57c51781a274787eb14b96044775112f22c8b4c47ed1428","ssdeep":"","tlshash":"de41ff1396b0981822704229bde2f4088e26d587d71a9a5d718d31bdcfd1fe486f32fa","first_seen":"2026-03-06T09:32:29.628594Z","last_seen":"2026-03-06T09:39:26.957526Z","times_seen":2,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":71,"dns":40,"connect":8,"send":0,"wait":515,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Low_13-Dtre4Edb.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Low_13-Dtre4Edb.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-35c4\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49103\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0TOCJmYcznJD%2FlYl3v8uI7zm6BShqJQ6Kge2XYWZj4EA3%2BSjzj41MIyGrg0vgGaFRHTBoXB%2FHJB0ChPBtuSnnCKmy7f1w2SrUIYnLoNY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc995590fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 160, 8-bit/color RGBA, non-interlaced","md5":"2c6e67fc2e060d5be1cbe4adeee0101a","sha1":"47a256417b8b8c8f501e46f45201e4de3002f4f4","sha256":"1623e3d17213444597dfd17cf82b953938427487c41cebf5f8d24bcab6ff1045","sha512":"5926dca7f68517e2e11fb30da9538daaa83dd4f2c732443c077ea15717fc8a6dc1a5b86fd1d56f456eab45d9892f6c8a038d1f4f68e72128a08a3643eb27efff","ssdeep":"384:4RDnt7dGap/Krho5yWTenohUtYQZ+o96BJ:yDt7Hp1enMUtY29c","tlshash":"a252af2f7d000d622e049ba51dbf80d683b188d1c8d6b474e759dc12ba7e7bb15cee84","first_seen":"2025-09-04T00:18:50.331142Z","last_seen":"2026-06-01T14:33:52.144025Z","times_seen":58,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.lnsx1688xsh.vip/api/option/rules/getVideo","fqdn":"webapi.lnsx1688xsh.vip","domain":"lnsx1688xsh.vip","tld":"vip"},"ip":{"addr":"172.67.158.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnsx1688xsh.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 14:29:18 GMT","end":"Sun, 12 Apr 2026 15:26:41 GMT"},"fingerprint":{"sha1":"E9:B1:F4:E0:BF:66:D3:74:03:E3:21:AC:9D:46:EC:D4:9A:FC:2B:F6","sha256":"C2:8A:70:27:53:16:F9:54:F2:4D:8A:BB:79:D9:6F:F9:20:F0:19:E4:2E:78:F8:45:94:EE:9A:58:DD:7E:35:71"}}},"request":{"raw":"OPTIONS /api/option/rules/getVideo HTTP/1.1\r\nHost: webapi.lnsx1688xsh.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nReferer: https://lnshshnxsh.net/\r\nOrigin: https://lnshshnxsh.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lnshshnxsh.net\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wt%2FvuV4RviQFX%2BI757WUVxR3MPuYaLeSdeHwREFLTTvnvxKJfywJEJNbRaiUrWCi9ZKr%2BK8XWMg4SmBAjfEpQsDl%2B77Vo4WIljHTwHTFCUIU6advpo4%3D\"}]}\r\ncf-ray: 9d8059ccf924a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":396,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"webapi.lnsx1688xsh.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.044fcef3fd6704d11a22c5c283233f82a.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:02.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.044fcef3fd6704d11a22c5c283233f82a.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lnshshnxsh.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 06 Mar 2026 09:32:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 25786\r\nConnection: keep-alive\r\nx-oss-request-id: 69AA9F13BC6A5B39328B3A06\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST\r\nAccess-Control-Max-Age: 0\r\nAccept-Ranges: bytes\r\nETag: \"C0AA781E44E36E25BF5C6936A3732BEF\"\r\nLast-Modified: Tue, 29 Jul 2025 14:19:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10366709686187218770\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: wKp4HkTjbiW/XGk2o3Mr7w==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25786,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"c0aa781e44e36e25bf5c6936a3732bef","sha1":"c6cd8ace1371b5e04ca01f48013a2357cbb635fc","sha256":"d8aa19e4cff8a601b747f86fac67a0440c63c4da9321e731eab907ec72483fdb","sha512":"22f29f35e329f65d4f67c3efc8958ca21dd7457e8c12da141c8c5e1e923befa0bc188799c735e70bd354107dde7b663a15420b0f3cd4280c67223071f8df3a6e","ssdeep":"768:LQA2zQZHwOaP13iacRWL1XheS4Y7FFp+49PiGossg3KuEky:LQbQHVas/WLreShHqlD","tlshash":"30c2d056b1ed711ec8cfb9445848345eb8a25d3acc334a96c1c437438489e34aa5bbfe","first_seen":"2026-03-06T09:32:29.622581Z","last_seen":"2026-03-09T15:15:36.246506Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2090,"timings":{"blocked":896,"dns":37,"connect":286,"send":0,"wait":290,"receive":6,"ssl":572},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.lnsx1688xsh.vip/ws/b8ede3a0-84b3-4f38-9a28-e7c0b681d443","fqdn":"webapi.lnsx1688xsh.vip","domain":"lnsx1688xsh.vip","tld":"vip"},"ip":{"addr":"172.67.158.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnsx1688xsh.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 14:29:18 GMT","end":"Sun, 12 Apr 2026 15:26:41 GMT"},"fingerprint":{"sha1":"E9:B1:F4:E0:BF:66:D3:74:03:E3:21:AC:9D:46:EC:D4:9A:FC:2B:F6","sha256":"C2:8A:70:27:53:16:F9:54:F2:4D:8A:BB:79:D9:6F:F9:20:F0:19:E4:2E:78:F8:45:94:EE:9A:58:DD:7E:35:71"}}},"request":{"raw":"GET /ws/b8ede3a0-84b3-4f38-9a28-e7c0b681d443 HTTP/1.1\r\nHost: webapi.lnsx1688xsh.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://lnshshnxsh.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: uqL3xPscNQ8Kjs203HBYgw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Fri, 06 Mar 2026 09:32:01 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://lnshshnxsh.net\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: FbqJC6VD2aBJUytYw922fySH0tg=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GvcRGTifRg%2B82UHhKLiHiplZ4B3KTKiJKvsD1EUByAcIja8Xz3ObwEmxndLumyAErkRJxJ1ID8UpkoyWvOw91E1c9AqPTqGZnhoQre2mqQb7zWAa429OLeENRS4eyc640J7DubhUGIfR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d8059cc2af78b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7766\u0026min_rtt=7749\u0026rtt_var=1655\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3121\u0026recv_bytes=1202\u0026delivery_rate=555285\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=7e297a7706e4a6fa\u0026ts=500\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":0,"dns":41,"connect":48,"send":0,"wait":483,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"webapi.lnsx1688xsh.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.lnsx1688xsh.vip/api/common/getAllSetting","fqdn":"webapi.lnsx1688xsh.vip","domain":"lnsx1688xsh.vip","tld":"vip"},"ip":{"addr":"172.67.158.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnsx1688xsh.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 14:29:18 GMT","end":"Sun, 12 Apr 2026 15:26:41 GMT"},"fingerprint":{"sha1":"E9:B1:F4:E0:BF:66:D3:74:03:E3:21:AC:9D:46:EC:D4:9A:FC:2B:F6","sha256":"C2:8A:70:27:53:16:F9:54:F2:4D:8A:BB:79:D9:6F:F9:20:F0:19:E4:2E:78:F8:45:94:EE:9A:58:DD:7E:35:71"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.lnsx1688xsh.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nReferer: https://lnshshnxsh.net/\r\nOrigin: https://lnshshnxsh.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lnshshnxsh.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FcOBM2lGsW262zw9NDuNe3yeMSA7CyWh%2B9JPtiiuZyE64CHSWoWTp7nTHrVMkP19ufFue9zA6AEuWPb97jTEEB1ylvjpQUTYxzVj60%2FbO9ITyv%2FcRe0%3D\"}]}\r\ncf-ray: 9d8059cc4fe2a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":35,"dns":1,"connect":8,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"webapi.lnsx1688xsh.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Low_5-C71n8onc.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Low_5-C71n8onc.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-4fb4\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49103\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDZ9V%2BUVHyz8e3dpn87mBk%2B018%2FtdjgILhkzgrdvp%2BY%2Fijn6BRksg7jZGJUIfdRg4RNTh24qor%2Bb9NrKuzUsWvHvbAUA27cYPyuMYYc5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc893690fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"92aebd9e0e41071377fcaa664328e73b","sha1":"bca41b209ccb35004a1d926c4f5219e4529331c2","sha256":"df48430fe13782354a476bfa43769b893312990feec6ca44148f705d637d31ee","sha512":"28572d96317587904072f3ba65dc957fe5193e88121c213557038150b43fe06ebfd14eae7c33a5725ce1b05466de57b85eadef136f5d6b146ebe1cdbccd48694","ssdeep":"384:Anr3XfgBsR36w0j9hFNbDNe34iPtNPtshDwG4EMpUxgbRafnDCtDJbeDfibINeuX:Ar/v3oTJCDPzuRDDqCff+nATvqc","tlshash":"6e92d01db90bb4215e1f6150a0e9d23bb69356d024a0d571efcbcab1a8614fecb0f4d7","first_seen":"2024-12-26T23:29:40.10144Z","last_seen":"2026-06-08T05:16:21.721567Z","times_seen":72,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.lnsx1688xsh.vip/api/option/rules/getTeam","fqdn":"webapi.lnsx1688xsh.vip","domain":"lnsx1688xsh.vip","tld":"vip"},"ip":{"addr":"172.67.158.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnsx1688xsh.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 14:29:18 GMT","end":"Sun, 12 Apr 2026 15:26:41 GMT"},"fingerprint":{"sha1":"E9:B1:F4:E0:BF:66:D3:74:03:E3:21:AC:9D:46:EC:D4:9A:FC:2B:F6","sha256":"C2:8A:70:27:53:16:F9:54:F2:4D:8A:BB:79:D9:6F:F9:20:F0:19:E4:2E:78:F8:45:94:EE:9A:58:DD:7E:35:71"}}},"request":{"raw":"OPTIONS /api/option/rules/getTeam HTTP/1.1\r\nHost: webapi.lnsx1688xsh.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nReferer: https://lnshshnxsh.net/\r\nOrigin: https://lnshshnxsh.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://lnshshnxsh.net\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDvc28SJl0y9nQO3DP2P1o243tRyjDB78V981Py7sJr9bkNkpswpTwYP8uyr5EfDitWUdAR0eSQOmKF3xRv2ZhXiUB2rbpNDiBkrgvs5QM7RhEE6wiw%3D\"}]}\r\ncf-ray: 9d8059ccf919a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"webapi.lnsx1688xsh.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cservice.vip/js/ai_service_diy_646frp7q.js?v=1761548374","fqdn":"cservice.vip","domain":"cservice.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:02.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cservice.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 21:47:19 GMT","end":"Tue, 07 Apr 2026 22:46:59 GMT"},"fingerprint":{"sha1":"A5:63:FC:3B:CE:6F:DF:D0:D8:AA:87:18:27:C8:A2:B4:01:3A:99:27","sha256":"4C:2E:05:A9:16:CC:FD:8D:F0:D5:92:B1:5B:29:A1:E8:A3:D1:0A:D1:95:CB:2F:83:92:31:F4:55:56:92:B2:14"}}},"request":{"raw":"GET /js/ai_service_diy_646frp7q.js?v=1761548374 HTTP/1.1\r\nHost: cservice.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 06:38:22 GMT\r\nvary: Accept-Encoding\r\netag: \"690d93de-712\"\r\nexpires: Fri, 06 Mar 2026 21:32:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TZ79onhDy6bsb08RdyovvfC41FNlOB2257vNnWogDKKy1Ai8r%2BHvFkn14MnwWNqm2I2wGA%2BuZBcb30hTY5bTtkQWZxF5QHZPJ7ycpA%3D%3D\"}]}\r\ncf-ray: 9d8059d14f35b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1810,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"bb993b2fa0cc465145c4199c9e422c63","sha1":"725f83ef83bca7a3f2ce74613d592db3c8c2683a","sha256":"edbc211f2b6bded7f14b9bcd6ada492e96e9c18ea41a5d889ca1bd6ed050242a","sha512":"02724bdf32eddaebf99fc2c4e1b8cdf833fddebd73322a1a19d654e454d5322e687071eee4961211b46612b71d77f4a46ac48edab07b173bbc10cbd2ca5187fd","ssdeep":"","tlshash":"c631c0525e99c5b31933322a9b3bb128ff3127131a02aa033efe57009f31d45aa65ec5","first_seen":"2026-03-06T09:32:29.632244Z","last_seen":"2026-03-06T09:39:26.966117Z","times_seen":2,"resource_available":true,"data":null}},"time_used":743,"timings":{"blocked":59,"dns":28,"connect":8,"send":0,"wait":623,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/i18n-DSxhgdy5.js","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:00.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/i18n-DSxhgdy5.js HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/assets/main-CqCaFnTF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 07:25:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa817d-eda6\"\r\nexpires: Fri, 06 Mar 2026 21:32:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X0z0l0PN6tlLQqJKbbUNayWap9U5Z37n%2BXAjaw45Gs%2FwZbFbTB0p36yHbGhT41OeGOnA2hMQ4zwTe8CKNbYhvBbNH7vZkiKiuTKD9vq%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059c4bb1490fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60838,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41432)","md5":"97812a0a2406068e45ea3f6ab284ddfd","sha1":"e567ee4fc7c1026e52493305a5910a79c30db199","sha256":"7ae7c6d75550841b5b9c9fb4028d13e14a6f12a0894b827accc8bfb96df674f0","sha512":"cf75c4142545fc00894ec259718b6ae7cd165aba2b3861ec81c2b5b3379c0b4df870e010854bc5ef564ea0a4a36d29a5ba14cb34b016b574a04f52343ffdbf73","ssdeep":"768:yjQiGhPNpnRHADEsVoXVLfftjE74t0DlQ/Ak0qVdKa5NcaGg4v0w63ODa7rgEiX+:N7Uq0+/YjQ9vau7K8uVoV","tlshash":"d153f7d634c7b012977a56e760b31005ab3e1b19340ed8a4f1bcda873e73d1a82a7f59","first_seen":"2025-12-18T00:45:38.401592Z","last_seen":"2026-03-09T15:15:36.232977Z","times_seen":11,"resource_available":true,"data":null}},"time_used":731,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/i18n-DSxhgdy5.js","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/i18n-DSxhgdy5.js HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lnshshnxsh.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 07:25:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa817d-eda6\"\r\nexpires: Fri, 06 Mar 2026 21:32:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tdCjt8MVSVdzRSDsTj268Jwhx%2Bc5%2Bj9SF04kasrNUUj3F4K%2FhcjwLaw75SeE5dPazmIh74qL9PtXOPyIazZzwAlt%2FklJqEyCDsMPrggs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059ca9b1890fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60838,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41432)","md5":"97812a0a2406068e45ea3f6ab284ddfd","sha1":"e567ee4fc7c1026e52493305a5910a79c30db199","sha256":"7ae7c6d75550841b5b9c9fb4028d13e14a6f12a0894b827accc8bfb96df674f0","sha512":"cf75c4142545fc00894ec259718b6ae7cd165aba2b3861ec81c2b5b3379c0b4df870e010854bc5ef564ea0a4a36d29a5ba14cb34b016b574a04f52343ffdbf73","ssdeep":"768:yjQiGhPNpnRHADEsVoXVLfftjE74t0DlQ/Ak0qVdKa5NcaGg4v0w63ODa7rgEiX+:N7Uq0+/YjQ9vau7K8uVoV","tlshash":"d153f7d634c7b012977a56e760b31005ab3e1b19340ed8a4f1bcda873e73d1a82a7f59","first_seen":"2025-12-18T00:45:38.401592Z","last_seen":"2026-03-09T15:15:36.232977Z","times_seen":11,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/tether-bep20-Do_RZ-CE.svg","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/tether-bep20-Do_RZ-CE.svg HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 07:25:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa817d-42e0\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l6BrNBOnM%2BnMIOOjZ6wqNUGqFSoBzI20HFkvT%2B6MlaKObIBSL5fjdegT3fd2SuZeLzufpuEQrzR08%2FsYfjIUOk9vIJ6NrTLnnAbYlvWK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc489490fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17120,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09878eaf15fe1cddec76d5d506b20a8f","sha1":"f5a9f2f72c813624315cc0725441f237229cbfbd","sha256":"faafe4b1c558a3aa28117a2ceb955559150c24df1c8debe06b6cf404194d644c","sha512":"60da5902c4413eddc29b1f8e6bfd688020b035f6d2983169b1e848731f11b4893cc392e25909ef5893b095df5d17e418cddf277a010d0d74e189dc2d96a97c6d","ssdeep":"384:kW56SMp+GrQEXuQdN+XnVS8GJVZvshYdMYhPO:kIMp+8QGXD+XA8uXMQO","tlshash":"927285c83779d3fcf401f9dedb1530742d0e68dba6a244b8c7721d09a85a4dc9e958e2","first_seen":"2026-03-06T09:32:29.633841Z","last_seen":"2026-03-09T15:15:36.226471Z","times_seen":4,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Low_2-DlfMR8Iv.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Low_2-DlfMR8Iv.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-1c70\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49103\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8lbQEuYkerR3T5c6F9G91ETb27NxiqBs1OrJgXcyQoTyfrcyKzoxS61Z6DXUWuZ199hheZ3Lfg2%2F1Ibh%2Fr%2FM8%2FqNnoavqiF1FSIa3Ark\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc892d90fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7280,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"3bba6d7047f93b8079b6574966141522","sha1":"6315fa7577ca55f1ea3f1cbdbf1d8c92b88646ce","sha256":"45b87f2619cb785de2ea69042fbad87abecc7d73e6838f6e7e21bb7a4fc24dd9","sha512":"2460ada343603c0555e7015a28f8d72417166827be8e300a741f6557adc9e5aded4ef7d6294f234e777851afa3d39586a8bb61fe461727efda1a975b070b22f8","ssdeep":"96:fSo4ltvV8m5Zcw/IPgUW0Vc0BpNZJfqa6hnliuUxWNBgPe0pSipGDhreyCiK:fSo4rvqAZjiBzZJyaslNzNuPddkDhrV8","tlshash":"8ae1affd77d102087854606a154710309ad06f1beae4ffc689915b839a0b1fcad2e6a8","first_seen":"2025-02-12T08:38:06.871461Z","last_seen":"2026-06-08T05:16:21.722165Z","times_seen":73,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/vendor-B7IM__cc.js","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/vendor-B7IM__cc.js HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lnshshnxsh.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 07:25:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa817d-19e13\"\r\nexpires: Fri, 06 Mar 2026 21:32:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JiwcZG%2FLSIfiGIpcEbgKfJ4vUQ2IaUbiLOrrrKU%2BDGqFmA73ff6Bg0rfbHGXuZd%2FiKnmNGsL6ZTKz%2FpXkneXDAXLbS97OozJk1dX%2Blyf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059ca9b1490fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106003,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33706)","md5":"06d058b4fd23927acc5662e43f93f62f","sha1":"cdca549f5bab4ac036c308ca9fe6dffb97066558","sha256":"55d6534567b17d36c336cdc83fac44d584a86a4a9baaaf4bd1c482086ab6e61d","sha512":"1f430058676a40efdca5c4564365ccf511a7acbf46719e5a27699e0edd4b1a01e6f3838706cc1350ae461eb3f3550c3054028f9cede06896dc9352db2838b5c6","ssdeep":"1536:nyp4FfPoBgIA+vstBjefSVf0vzCcGiVe5KQ2aZlluO1XqwlcsptOVf:yCqBgIGjeqVf0vzNREKQzZXuXsrSf","tlshash":"8ba308e93282b06253ea09e7007b4015f33a1959380e98d4f16daddb3d7744a91fbe7e","first_seen":"2025-12-18T00:45:38.392145Z","last_seen":"2026-03-09T15:15:36.23408Z","times_seen":11,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/tether-trc20-C6wMdRj0.svg","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/tether-trc20-C6wMdRj0.svg HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 07:25:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa817d-4402\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4kfLhdK8nzUYBsg1NZIrH1nXId%2FugtGD93vakM2MbkUGaFO1mzB2QNb2q29dV3E7GKRywBQkOOpP7qR9rhz%2BY9iDBN6RRti8puDg7QV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc489890fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17410,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1720c9bfd83c003a2ef197d00b79070c","sha1":"311faa8882d9720b32e5c49a36309ffcf963b71e","sha256":"1eb72689005177f36a9583f9667f910817ff40f23213015a6410a9c73d02e67c","sha512":"77ca38ad2f53b327d8074ee2799d97cc491e54d4e6d56ba98c7fd39a1746ce7df9deacd27ad5fb6cea82eba47989455ff7d8c0ef98883fbc75ac1fbc333192ba","ssdeep":"192:VEjiqmX56SgbTYLMp+y3rQECou7QpgyD3Gy+qIONDqqPxZmTyMCyGYCWo2+TK5wj:kW56SMp+GrQEXuQdN+glOLb5+rMOQE/","tlshash":"0672c6c43775d3fcf401fadeda2630743d0e64d7a6a244a4c7722d09b45a49c9e958e3","first_seen":"2025-12-18T00:45:38.419526Z","last_seen":"2026-03-09T15:15:36.249429Z","times_seen":12,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Low_3-CZAdRCrv.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Low_3-CZAdRCrv.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-1476\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49103\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vA%2FbrY82mo1T7HOFG%2BJxNeM4jvXIXC2TgY32oRccckHRsmaPJaUQu1wCbPYRK1%2FMfimKxcnRoL2aIjSfUk4YzK%2Bkr1LbXnTFcV2INph1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc893090fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"44e1a5b762465a0eb365f3f6fcc1d60d","sha1":"0acc5c63c3660a7c702ae6957c4b827574ea07f5","sha256":"186abff8e623d5232e4d46a8719269905148ee6b8dbeb47ee45878568fe6bf36","sha512":"f61cde643eb6a175d0e0e4435503a05d0d982e475ef31704096a9767e1bd2bd91e830e056f702626a919e06f6277119f4cbb4f282e9b0b014958ef79eaac93ae","ssdeep":"96:NknS2ia5BOmDq6Q0bXWl/dLdt/mTzv+zIkPJcFciGB:NknJBOmG+w9dt/2VEJicP","tlshash":"bdb18e6a8641ed4039cb8fc274e58847c371e048a3f0972b19ddda5e47378a8dd694ea","first_seen":"2024-12-26T23:29:40.099933Z","last_seen":"2026-06-08T05:16:21.717989Z","times_seen":74,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Low_4-CZsCHZTt.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Low_4-CZsCHZTt.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-22f4\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49103\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OU04h5JXrsQ7NZM33yG7pT7EM%2BiEvt3VG3CAsR5oiB07DBhGER1HYhtp4W8Ttr%2BtgQ28ZlAAYm78bsFByP7cDN9Le8ZGzOQVn8HCm4o9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc893590fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8948,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"5b3ee8976381978db00a5d83a5e8bb1d","sha1":"e4c03afd678536b2659f6115ce67e49bc6127f95","sha256":"d16314aa812455f4867fc9124af62e75ac962d48bebf068fb343e5b49c1f87c5","sha512":"2c4884ab65d9d3c62bd64ff25bd2ee709b6405f07e941e3c68ab28e82ff8fd91ba7a1c5a0b189599eda448e0a2f39b8b43a80878628b4afd95f9428e0e8e977c","ssdeep":"192:rknSAq+3Xq+g5TelZa+hXbDROtAir4cIPgi1QghQPkGadurVxKq:AnSAf3XfgBelZPN+DIYEQghOvrKq","tlshash":"40028f4599486e4165d6b294aceda00353a28fc0c782d8747cedcc291cf0bbfce86ad3","first_seen":"2024-12-26T23:29:40.048598Z","last_seen":"2026-06-08T05:16:21.667478Z","times_seen":72,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnshshnxsh.net/assets/Low_8-8hE399Ma.png","fqdn":"lnshshnxsh.net","domain":"lnshshnxsh.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnshshnxsh.net/","date":"2026-03-06T09:32:01.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnshshnxsh.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:51:09 GMT","end":"Wed, 20 May 2026 08:51:08 GMT"},"fingerprint":{"sha1":"E1:63:30:0A:EF:6D:EC:74:E4:5B:62:3F:8F:03:03:7D:AA:F5:00:9E","sha256":"32:1B:E1:AF:FE:69:11:8E:2C:A1:A3:64:8B:7F:8A:1C:9D:0E:F3:26:11:8A:1A:E5:06:E8:F4:6C:13:2A:26:62"}}},"request":{"raw":"GET /assets/Low_8-8hE399Ma.png HTTP/1.1\r\nHost: lnshshnxsh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnshshnxsh.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 09:32:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Mar 2026 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a83b1d-1463\"\r\nexpires: Sat, 04 Apr 2026 19:53:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 49103\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AX8wMeeYDkXawOSKO%2Bk%2BlDMI%2B6JkywR2y3uNit6bqnCqKGgsSQozFcH5bWdYcc1K9XdcPo1wqNIdQ6UEi24VOp5Ao7rKZr6u9gEfPs2L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8059cc893f90fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"6211d145652aa5683717095a2b8f3cb9","sha1":"e723a1eb0b976b950c7918554ca3e03b82517b2a","sha256":"4ffbb5844e062f2f9fc2a8d92fbb4e20eefda839538163f19cad9127a9882b5a","sha512":"c586421b8bab3f03423e22a99e4733fc6de0e8947fe5544cadd46d6f8cee89d2906504e34ed9a133a4e349be47d931ad936609fa19daa7e00b910b5d28d9a835","ssdeep":"96:rknmWq2iSs+x1Nfa9cNG0KGY+xqHZTHOHU+xLYTiuL+R83xrIN1KEVXDFQLsFnu8:rknK+3Xq+g5Tu0+ZuybZVXDFFtfQke9Q","tlshash":"b3b12a0abf406c114a9d66c067ee610767775bc086a4a560fce6cd175c306fdcd8e9c6","first_seen":"2024-12-26T23:29:40.093755Z","last_seen":"2026-06-08T05:16:21.684567Z","times_seen":74,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"lnshshnxsh.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}