{"report_id":"05c9c018-fa84-42cd-a6f5-6b4bd847d50d","version":6,"status":"done","tags":[],"date":"2026-02-12T12:40:42Z","url":{"schema":"http","addr":"863365.cc","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":0,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"863365.cc/","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"title":"欢迎莅临","dom":{"size":26886,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16138)","md5":"b5448090348bc551f22cf50db680bac3","sha1":"c68f38bbde463b35a213c9e86eb384d4b139cad8","sha256":"861242667d4ace47320f7c00a14763dae90f64cd29933a27ed26867d52feb243","sha512":"334a96b120b7c7ceedcf0ec73099f2185692e309abb79ca8316b64acd7e33dd78e71f92263d14cbb817cbdfbdb3881f283baf306e0bcc3ea715dc30b0e1ce8fb","ssdeep":"768:3QnPfWnnnnvTh6u3ExM3qFk69W8teh2WkN:3Q3WnnnnvexM3qFk69WZeN","tlshash":"41c25d32a6e610375117c0e9af7b9b0d6acaa10bc646cd4479ec47c58fc7e66cca358c","dom_hash":"domhash66bbbac30a98eb8a1c9cd68a6cbe17ae","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"863365.cc","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":0,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-19T12:40:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"863365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"863365.cc","ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"domain_registered":"2015-10-11","domain_rank":0,"first_seen":"2026-01-19T14:18:03.495363Z","last_seen":"2026-01-19T14:18:03.495363Z","alert_count":48,"request_count":12,"received_data":464522,"sent_data":7642,"comment":"","tags":null,"fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]},{"fqdn":"collect-v6.51.la","ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2026-02-09T03:15:46.246448Z","alert_count":0,"request_count":1,"received_data":354,"sent_data":459,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mrthzjh.gykigryttccoig.top","ip":{"addr":"104.208.97.111","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-01-12","domain_rank":0,"first_seen":"2026-02-12T12:27:04.615405Z","last_seen":"2026-02-12T12:27:04.615405Z","alert_count":0,"request_count":1,"received_data":20270,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hcdream.com","ip":{"addr":"45.194.140.3","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"domain_registered":"2018-06-21","domain_rank":0,"first_seen":"2019-01-18T16:52:36Z","last_seen":"2026-02-12T12:27:05.105079Z","alert_count":0,"request_count":1,"received_data":3981,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mrthzjh.gykigryttccoig.top/widget/linkchat.1.1.0.js","fqdn":"mrthzjh.gykigryttccoig.top","domain":"gykigryttccoig.top","tld":"top"},"ip":{"addr":"104.208.97.111","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"59b0c9f1c537544a364cc03e11815b34","sha1":"88c488181283b1ed9bf3e3c48ac056a312e47506","sha256":"afd9b6f3b5ea5286fe30818f301786af0f5c79890e873ccf2b8d0ce2c1e65fe6","sha512":"fa4961eca50806364cf62f8c817cde4dfaa9d44ac7e1a7cb7376b08a4047d9bf6f5660417872bf03b6cd0167f8987985806697c7bd5fc1f014c053ddbf2ab98e","ssdeep":"384:s/AmLO+73nnnnOGyME7k6yr3ExMdRQjFFk5o9WenZbFnIE2OeIy4jAZktY9xkSxM:s/hiannnnvTh6u3ExM3qFk69W8teh2Wa","tlshash":"dd92b034f748652ad02d407921be7a4c799a386f9b054aec30b2e5e39dfc95c3571a3c","size":19939,"data":"","first_seen":"2023-09-02T04:11:25Z","last_seen":"2026-05-30T15:22:50.69376Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"863365.cc/","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"eac185a5bc093d9554cc75ab0a950e72","sha1":"518436b667a6ea05251034e5a38d5f0d745607c3","sha256":"12d6e84f61fb9d82a0239fd640adc0094b46588fc6a869ab9710a6d08f83ea46","sha512":"944bf305738181e90d8d55c6a094540f2eaaa779fa8dc802dae1bae6704f7dc56e6de6effa85c26436851fdc2ce6e22039a5d83f6e6e1612775a6a180375788b","ssdeep":"","tlshash":"27b011a3ce0b0c08b8a222aec200a200ccb3c20a0b800ee030e802330aac8302283002","size":89,"data":"","first_seen":"2026-01-19T14:18:09.49185Z","last_seen":"2026-04-03T13:33:05.402558Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"863365.cc/","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"325c04b825d87e02dfb9312ced98397e","sha1":"c0e3e978636a2afae497df096d396af65ac7dd64","sha256":"c54c740fe97f1a5839bdee83f6c2ef5528cc395bde2c8d80157ba94521dda91d","sha512":"cb905b2ec8a7046a81f509cffcf524dce69bd5acc6f6fb63eec9f843c63c29cadf8f6da1c332d9b1c4387d8efa26ded3e142c6c1f0106d85b31640fa30c2c747","ssdeep":"","tlshash":"0b41327661f701660173b0edab5b52093767a1076845cd02be2c47814fc6f2fc9a32cd","size":2401,"data":"","first_seen":"2026-01-19T14:18:09.493987Z","last_seen":"2026-04-03T13:33:05.404764Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"863365.cc/","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"50971b405a6a8d6f17d21f333d54409d","sha1":"5dfab942a1b61bfd4725eb64d4796a6340c35cb3","sha256":"81203991cc8fe07928ea3e7d74c81aeec952decb60a7a82d606e5145562534d5","sha512":"8fd4ccfef4207f3c67befc25014ecd91a517e0aa22724181753f8bcd0a677f9119cb149962e53d5697442a8f30e70b6d2f1769781823c186459305fd0081e089","ssdeep":"","tlshash":"8a319157228b34354277913b9b8fee05b3fb11830549cc1078ac88815f84e3542f5bed","size":1445,"data":"","first_seen":"2026-01-19T14:18:09.496195Z","last_seen":"2026-04-03T13:33:05.406774Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-06-06T16:25:37.893969Z","times_seen":98183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hcdream.com/berlin/customer-service/kefu78.js","fqdn":"hcdream.com","domain":"hcdream.com","tld":"com"},"ip":{"addr":"45.194.140.3","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1c25042cfb1672fd538373a9094b506","sha1":"231c3dfc68134cd465f575419bf8cc0a74d09f66","sha256":"353cd7dfb2b948b8199a11b6de272f97bf1dca27162ce0090f19f0fd8a8064e1","sha512":"a868cfbf30e842d568fafa7016c50d0d6d61cc3a2bc4b29d6608f15c9459b6fd006e98ea3d66c53d28584eb2c21ef429092ecaf3293425a2bfb44510e63c0893","ssdeep":"","tlshash":"a07152d669a65125440721e96beb3618a17a706fff07ed61374cc98c0f85cc7a01e589","size":3525,"data":"","first_seen":"2026-02-12T12:27:11.082879Z","last_seen":"2026-04-03T13:33:05.379419Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"863365.cc/images/ico.ico","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://863365.cc/","date":"2026-02-12T12:40:23.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"863365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 10:39:06 GMT","end":"Fri, 17 Apr 2026 10:39:05 GMT"},"fingerprint":{"sha1":"17:40:84:06:58:98:FF:21:15:F1:59:1D:F9:EC:31:CE:B2:08:D3:F4","sha256":"33:C4:78:74:48:FA:C1:CF:D4:8C:CC:3F:DC:6D:16:D0:B1:91:57:84:AE:C5:EC:D1:BD:99:4F:EE:FF:C1:D0:06"}}},"request":{"raw":"GET /images/ico.ico HTTP/1.1\r\nHost: 863365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://863365.cc/\r\nCookie: __vtins__3J2CCoAyO89pGu5h=%7B%22sid%22%3A%20%22405d708d-57ba-55c6-b0c5-1e1d226d5502%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201770901822465%2C%20%22ct%22%3A%201770900022465%7D; __51uvsct__3J2CCoAyO89pGu5h=1; __51vcke__3J2CCoAyO89pGu5h=37176ecf-f1ea-52d1-940e-f6359a5e9b26; __51vuft__3J2CCoAyO89pGu5h=1770900022471\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nserver: Microsoft-IIS/10.0\r\ndate: Thu, 12 Feb 2026 12:40:25 GMT\r\ncontent-length: 1245\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1245,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"5343c1a8b203c162a3bf3870d9f50fd4","sha1":"04b5b886c20d88b57eea6d8ff882624a4ac1e51d","sha256":"dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f","sha512":"e0f50acb6061744e825a4051765cebf23e8c489b55b190739409d8a79bb08dac8f919247a4e5f65a015ea9c57d326bbef7ea045163915129e01f316c4958d949","ssdeep":"","tlshash":"7b21422992983814f69384a061f277c23f078286e66f1b68a023b263e4c26e281d33c4","first_seen":"2023-03-09T23:36:42Z","last_seen":"2026-06-06T18:38:13.323621Z","times_seen":60013,"resource_available":true,"data":null}},"time_used":6687,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6687,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"863365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"863365.cc/images/imgtxt.gif","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://863365.cc/","date":"2026-02-12T12:40:21.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"863365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 10:39:06 GMT","end":"Fri, 17 Apr 2026 10:39:05 GMT"},"fingerprint":{"sha1":"17:40:84:06:58:98:FF:21:15:F1:59:1D:F9:EC:31:CE:B2:08:D3:F4","sha256":"33:C4:78:74:48:FA:C1:CF:D4:8C:CC:3F:DC:6D:16:D0:B1:91:57:84:AE:C5:EC:D1:BD:99:4F:EE:FF:C1:D0:06"}}},"request":{"raw":"GET /images/imgtxt.gif HTTP/1.1\r\nHost: 863365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://863365.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nlast-modified: Mon, 27 Nov 2023 10:10:04 GMT\r\naccept-ranges: bytes\r\netag: \"0a6c3e31921da1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Thu, 12 Feb 2026 12:40:22 GMT\r\ncontent-length: 4598\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":4598,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 690 x 48","md5":"e2ccddbddcd70822dbc5aca5f9fe31e8","sha1":"e7b8383257fc12b46b4ba282d02156d1db617fc8","sha256":"efb03cc74be5b027ffa5bb4bef0cb3ba5f9854ff25d07996f550e1ed3d4062fb","sha512":"2115efb43c865fab23f2b316e9507158094a64b844c72fbf9ada392d8ce2f487c72c643cd7b37915b428d515a3ef1a6a1b7610ca5add8031e9762e09641f6c25","ssdeep":"96:AunUdh2wOs56hNf34N+C2IrLGPF3S5BNOjg1LvLEDxYkgwH5hG8ZomJ91:ARAa+ChL0lSjN0g1LvYCwH5w8ZXv1","tlshash":"a6915d4deeb11441c14a3f7269b39c496927b44046d4f055b7eee422857cab721cfdcb","first_seen":"2025-10-10T03:25:52.153065Z","last_seen":"2026-05-30T15:22:50.649491Z","times_seen":16,"resource_available":false,"data":null}},"time_used":979,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":979,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"863365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://863365.cc/","date":"2026-02-12T12:40:22.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":"广州有啦网络科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 04:08:22 GMT","end":"Sun, 19 Apr 2026 04:08:21 GMT"},"fingerprint":{"sha1":"AE:CB:32:71:EE:EE:E6:72:A4:88:B2:9F:4F:C4:E5:B5:A8:C2:73:6C","sha256":"7C:F1:09:2F:6A:8C:5B:F8:63:DF:D3:32:B0:F3:F8:E7:01:29:0E:F2:55:8B:4F:6C:58:55:8E:44:E9:EC:15:F4"}}},"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 274\r\nOrigin: https://863365.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://863365.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 210 No Reason Phrase\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://863365.cc\r\naccess-control-allow-credentials: true\r\nserver: TencentEdgeOne\r\ncontent-length: 0\r\ndate: Thu, 12 Feb 2026 12:40:22 GMT\r\neo-log-uuid: 17597796314586404806\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T18:09:48.345789Z","times_seen":16186679,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":692,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"863365.cc/video/play1.mp4","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://863365.cc/","date":"2026-02-12T12:40:22.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"863365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 10:39:06 GMT","end":"Fri, 17 Apr 2026 10:39:05 GMT"},"fingerprint":{"sha1":"17:40:84:06:58:98:FF:21:15:F1:59:1D:F9:EC:31:CE:B2:08:D3:F4","sha256":"33:C4:78:74:48:FA:C1:CF:D4:8C:CC:3F:DC:6D:16:D0:B1:91:57:84:AE:C5:EC:D1:BD:99:4F:EE:FF:C1:D0:06"}}},"request":{"raw":"GET /video/play1.mp4 HTTP/1.1\r\nHost: 863365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://863365.cc/\r\nCookie: __vtins__3J2CCoAyO89pGu5h=%7B%22sid%22%3A%20%22405d708d-57ba-55c6-b0c5-1e1d226d5502%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201770901822465%2C%20%22ct%22%3A%201770900022465%7D; __51uvsct__3J2CCoAyO89pGu5h=1; __51vcke__3J2CCoAyO89pGu5h=37176ecf-f1ea-52d1-940e-f6359a5e9b26; __51vuft__3J2CCoAyO89pGu5h=1770900022471\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\nlast-modified: Mon, 27 Nov 2023 05:05:50 GMT\r\naccept-ranges: bytes\r\netag: \"04b8863ef20da1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Thu, 12 Feb 2026 12:40:24 GMT\r\ncontent-length: 7693090\r\ncontent-range: bytes 0-7693089/7693090\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":126967,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MPEG v4 system, 3GPP JVT AVC [ISO 14496-12:2005]","md5":"e3bc1d2d7dfc5a6bd2a5db551b20a867","sha1":"6e8046a653b42a78fdf0eef1fe64aa9f73caf821","sha256":"9ae7cfdc56a3b0f0b4f32f94874623a673650d882c2057f123df4670bdf6b906","sha512":"eb9a531801eaa8a35554814e1d3fd235267571c693fa351dcc79521d613e0a7cee9c07a2fecfeedae75732b3d069b4a46b0fbed32e87d7af3596d24f749b2864","ssdeep":"3072:HQI1N10s4gqSy1HyOxM1nXUoy7n4Nzm/DKbvG6q:B1N10s2zHyn1XUD4M/DEG6q","tlshash":"9cc3121754e3840bde30c8fbd0d13a33da009361ba6973eb2599be1479757de9023ad9","first_seen":"2026-02-12T12:40:42.937062Z","last_seen":"2026-02-12T12:40:42.937062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"863365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"863365.cc/video/play1.mp4","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://863365.cc/","date":"2026-02-12T12:40:22.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"863365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 10:39:06 GMT","end":"Fri, 17 Apr 2026 10:39:05 GMT"},"fingerprint":{"sha1":"17:40:84:06:58:98:FF:21:15:F1:59:1D:F9:EC:31:CE:B2:08:D3:F4","sha256":"33:C4:78:74:48:FA:C1:CF:D4:8C:CC:3F:DC:6D:16:D0:B1:91:57:84:AE:C5:EC:D1:BD:99:4F:EE:FF:C1:D0:06"}}},"request":{"raw":"GET /video/play1.mp4 HTTP/1.1\r\nHost: 863365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=7667712-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://863365.cc/\r\nCookie: __vtins__3J2CCoAyO89pGu5h=%7B%22sid%22%3A%20%22405d708d-57ba-55c6-b0c5-1e1d226d5502%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201770901822465%2C%20%22ct%22%3A%201770900022465%7D; __51uvsct__3J2CCoAyO89pGu5h=1; __51vcke__3J2CCoAyO89pGu5h=37176ecf-f1ea-52d1-940e-f6359a5e9b26; __51vuft__3J2CCoAyO89pGu5h=1770900022471\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\nlast-modified: Mon, 27 Nov 2023 05:05:50 GMT\r\naccept-ranges: bytes\r\netag: \"04b8863ef20da1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Thu, 12 Feb 2026 12:40:24 GMT\r\ncontent-length: 25378\r\ncontent-range: bytes 7667712-7693089/7693090\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":25378,"size_decoded":0,"mime_type":"video/mp4","magic":"Dyalog APL DFS component file 64-bit level 3 journaled checksummed version 105.113","md5":"925ab35e6ba63682233048ce0e035130","sha1":"599ad768f25dc23913584d71b6e1890d6bd7c041","sha256":"1e85439ef86ff4916a354f39b9131f69679f55c681361a6c5009188fd2e7a6be","sha512":"4f232620f52499b2346b0afe677d22cc9c05e895e0c27ff60a6d24f0bb7be728fc8a28612b7bc53f01814a1332b19deadbf621eb47a7ed72ccddcd641bf0f7ea","ssdeep":"384:9Mt/kkS741lb5+cq1d1tRYfTn19bWnXATWNU1iA5:svlbEcej/yTnmnlyN5","tlshash":"6db28e26d3e0500acd7286b9a5c61712b779e5b8770747cfabe6a03efd4bb680d43084","first_seen":"2024-08-31T03:40:51Z","last_seen":"2026-05-30T15:22:50.722513Z","times_seen":19,"resource_available":false,"data":null}},"time_used":7627,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7626,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"863365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"863365.cc/images/lg78.gif","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://863365.cc/","date":"2026-02-12T12:40:21.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"863365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 10:39:06 GMT","end":"Fri, 17 Apr 2026 10:39:05 GMT"},"fingerprint":{"sha1":"17:40:84:06:58:98:FF:21:15:F1:59:1D:F9:EC:31:CE:B2:08:D3:F4","sha256":"33:C4:78:74:48:FA:C1:CF:D4:8C:CC:3F:DC:6D:16:D0:B1:91:57:84:AE:C5:EC:D1:BD:99:4F:EE:FF:C1:D0:06"}}},"request":{"raw":"GET /images/lg78.gif HTTP/1.1\r\nHost: 863365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://863365.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nlast-modified: Sun, 26 Nov 2023 07:18:33 GMT\r\naccept-ranges: bytes\r\netag: \"80ea6fc33820da1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Thu, 12 Feb 2026 12:40:22 GMT\r\ncontent-length: 94194\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":94194,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 750 x 98","md5":"9dd6bd580ede939d8e4e9e4abe92f297","sha1":"1bfa6911058b5fbb76735a822cc7027c34495481","sha256":"1b6158427f4b2ca8aaf083e8200decede79bcdd2831f7f3c31a4b6afaa851d00","sha512":"a06f4d236a0522787ff3ab50e24d81e341620a9f3164479b510f1853d52a4a32b5f1a94ec57b0d4e9e11800be2bfc7ee567391d5cfca45a34d2b0324b281460c","ssdeep":"1536:OJ2R+xtJ4mm+Rt8F0moRKaEtJaXfWpdfVNth61DuRNgDhyZoDQDChouyvuz:C2YxtTnSFoRetJAch6tuvVoQ+houyvuz","tlshash":"2f93026b430e8c521ca57b5c552663e18cfbdc3f604c965b6ff1289f7662a3f1834898","first_seen":"2024-08-31T08:28:17.800874Z","last_seen":"2026-05-30T15:22:50.646119Z","times_seen":19,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":491,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"863365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"863365.cc/images/icon1.png","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://863365.cc/","date":"2026-02-12T12:40:22.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"863365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 10:39:06 GMT","end":"Fri, 17 Apr 2026 10:39:05 GMT"},"fingerprint":{"sha1":"17:40:84:06:58:98:FF:21:15:F1:59:1D:F9:EC:31:CE:B2:08:D3:F4","sha256":"33:C4:78:74:48:FA:C1:CF:D4:8C:CC:3F:DC:6D:16:D0:B1:91:57:84:AE:C5:EC:D1:BD:99:4F:EE:FF:C1:D0:06"}}},"request":{"raw":"GET /images/icon1.png HTTP/1.1\r\nHost: 863365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://863365.cc/style/global1.css\r\nCookie: __vtins__3J2CCoAyO89pGu5h=%7B%22sid%22%3A%20%22405d708d-57ba-55c6-b0c5-1e1d226d5502%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201770901822465%2C%20%22ct%22%3A%201770900022465%7D; __51uvsct__3J2CCoAyO89pGu5h=1; __51vcke__3J2CCoAyO89pGu5h=37176ecf-f1ea-52d1-940e-f6359a5e9b26; __51vuft__3J2CCoAyO89pGu5h=1770900022471\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Nov 2023 12:58:25 GMT\r\naccept-ranges: bytes\r\netag: \"802e43e6820da1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Thu, 12 Feb 2026 12:40:24 GMT\r\ncontent-length: 1344\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 8-bit/color RGBA, non-interlaced","md5":"22d02dc1615d71f457a237d86e86a969","sha1":"729953a939c5f4763a3937a0174d13ef6e017ff3","sha256":"84204e649f1ed467a38dcc60f29f141c35f53ef2ad69c938edfb83c178994dc0","sha512":"234347e01878b83df82c7b7e03f0e980c4ac81ecbc82f3abcde2354d4242e9281299647321fc11c0dabd095b29218156548e4af2ba5fb55183f6eca45ee18e7d","ssdeep":"","tlshash":"bc2108649d9f11e48ca0b8532864621ab740e0c5d333a6042abb69ae8b1c73c8fb03c8","first_seen":"2024-09-28T07:18:50.46345Z","last_seen":"2026-05-30T15:22:50.67439Z","times_seen":19,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"863365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"863365.cc/images/jiantou.png","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://863365.cc/","date":"2026-02-12T12:40:22.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"863365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 10:39:06 GMT","end":"Fri, 17 Apr 2026 10:39:05 GMT"},"fingerprint":{"sha1":"17:40:84:06:58:98:FF:21:15:F1:59:1D:F9:EC:31:CE:B2:08:D3:F4","sha256":"33:C4:78:74:48:FA:C1:CF:D4:8C:CC:3F:DC:6D:16:D0:B1:91:57:84:AE:C5:EC:D1:BD:99:4F:EE:FF:C1:D0:06"}}},"request":{"raw":"GET /images/jiantou.png HTTP/1.1\r\nHost: 863365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://863365.cc/\r\nCookie: __vtins__3J2CCoAyO89pGu5h=%7B%22sid%22%3A%20%22405d708d-57ba-55c6-b0c5-1e1d226d5502%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201770901822465%2C%20%22ct%22%3A%201770900022465%7D; __51uvsct__3J2CCoAyO89pGu5h=1; __51vcke__3J2CCoAyO89pGu5h=37176ecf-f1ea-52d1-940e-f6359a5e9b26; __51vuft__3J2CCoAyO89pGu5h=1770900022471\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Feb 2023 06:05:42 GMT\r\naccept-ranges: bytes\r\netag: \"03fc285714ad91:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Thu, 12 Feb 2026 12:40:24 GMT\r\ncontent-length: 306\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 12, 8-bit colormap, non-interlaced","md5":"2e47611abe6f6320067ef07c06c65906","sha1":"8b766933c6cd949b6fbc2d06659b5baf790b4917","sha256":"5af2790a57ca6739d61a3a564b49ddbe2f40e0294e38f4fdb56190dfec8c6ddd","sha512":"63255a48a865c08253e99f07f9f175f79fcde61688e8224342aaf8c0250b53a857d802172e479daf91110ca1324226bfb395bed851f61a44bb878bfae2b8b5d7","ssdeep":"","tlshash":"54e0a7ea5a4159e7ccac5217531d14467d21ef34db5541075bc578bd6c370706181193","first_seen":"2024-08-31T03:40:51Z","last_seen":"2026-05-30T15:22:50.652712Z","times_seen":20,"resource_available":false,"data":null}},"time_used":4957,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4956,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"863365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrthzjh.gykigryttccoig.top/widget/linkchat.1.1.0.js","fqdn":"mrthzjh.gykigryttccoig.top","domain":"gykigryttccoig.top","tld":"top"},"ip":{"addr":"104.208.97.111","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://863365.cc/","date":"2026-02-12T12:40:22.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrthzjh.gykigryttccoig.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 05:01:57 GMT","end":"Sun, 12 Apr 2026 05:01:56 GMT"},"fingerprint":{"sha1":"EE:16:7B:09:8C:05:36:32:4F:71:1D:04:EF:85:ED:27:D0:BC:1E:A1","sha256":"6C:16:F7:3C:F7:79:38:5D:8F:42:90:2E:0E:8C:77:1C:C0:E2:97:16:E9:F9:D8:76:19:E1:19:30:60:7C:9C:41"}}},"request":{"raw":"GET /widget/linkchat.1.1.0.js HTTP/1.1\r\nHost: mrthzjh.gykigryttccoig.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://863365.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 12 Feb 2026 01:45:08 GMT\r\netag: W/\"6422ed22-4de3\"\r\nlast-modified: Thu, 12 Feb 2026 01:45:08 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19939,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19912)","md5":"59b0c9f1c537544a364cc03e11815b34","sha1":"88c488181283b1ed9bf3e3c48ac056a312e47506","sha256":"afd9b6f3b5ea5286fe30818f301786af0f5c79890e873ccf2b8d0ce2c1e65fe6","sha512":"fa4961eca50806364cf62f8c817cde4dfaa9d44ac7e1a7cb7376b08a4047d9bf6f5660417872bf03b6cd0167f8987985806697c7bd5fc1f014c053ddbf2ab98e","ssdeep":"384:s/AmLO+73nnnnOGyME7k6yr3ExMdRQjFFk5o9WenZbFnIE2OeIy4jAZktY9xkSxM:s/hiannnnvTh6u3ExM3qFk69W8teh2Wa","tlshash":"dd92b034f748652ad02d407921be7a4c799a386f9b054aec30b2e5e39dfc95c3571a3c","first_seen":"2023-09-02T04:11:25Z","last_seen":"2026-05-30T15:22:50.69376Z","times_seen":39,"resource_available":true,"data":null}},"time_used":1226,"timings":{"blocked":508,"dns":101,"connect":205,"send":0,"wait":202,"receive":0,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"863365.cc/video/play1.mp4","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://863365.cc/","date":"2026-02-12T12:40:30.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"863365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 10:39:06 GMT","end":"Fri, 17 Apr 2026 10:39:05 GMT"},"fingerprint":{"sha1":"17:40:84:06:58:98:FF:21:15:F1:59:1D:F9:EC:31:CE:B2:08:D3:F4","sha256":"33:C4:78:74:48:FA:C1:CF:D4:8C:CC:3F:DC:6D:16:D0:B1:91:57:84:AE:C5:EC:D1:BD:99:4F:EE:FF:C1:D0:06"}}},"request":{"raw":"GET /video/play1.mp4 HTTP/1.1\r\nHost: 863365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=98304-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://863365.cc/\r\nCookie: __vtins__3J2CCoAyO89pGu5h=%7B%22sid%22%3A%20%22405d708d-57ba-55c6-b0c5-1e1d226d5502%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201770901822465%2C%20%22ct%22%3A%201770900022465%7D; __51uvsct__3J2CCoAyO89pGu5h=1; __51vcke__3J2CCoAyO89pGu5h=37176ecf-f1ea-52d1-940e-f6359a5e9b26; __51vuft__3J2CCoAyO89pGu5h=1770900022471\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\nlast-modified: Mon, 27 Nov 2023 05:05:50 GMT\r\naccept-ranges: bytes\r\netag: \"04b8863ef20da1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Thu, 12 Feb 2026 12:40:31 GMT\r\ncontent-length: 7594786\r\ncontent-range: bytes 98304-7693089/7693090\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":114661,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"a03fed4d09c3ae87ff86ba2de2ad8ca0","sha1":"4f05edec246bfd5c53f2ce57bafd0bb457bf494e","sha256":"b4a97553f30f6190a44f3c07dc3ca6df1fcae69c7ee35474ce4318d750475f39","sha512":"196a14bd83e4563326600a95bc823e70c8c50d4919e1017e214cc8520dad5d5fda656c4cb08a4de244542ab1f72a5722aa68f8031c106b7b7c9f5224f55cbb9e","ssdeep":"3072:Ln4Nzm/DKbvG6BHQmj5ujZC1N1ESDGPxgxk2:L4M/DEG6BwdiYSDB1","tlshash":"f4b3021556e70c8aedb543bbf30d7d5aaf0048675b9d63eb8cda58202d782fd8d03209","first_seen":"2026-01-26T12:22:52.831139Z","last_seen":"2026-02-12T12:40:42.947538Z","times_seen":3,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"863365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"863365.cc/","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-12T12:40:20.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"863365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 10:39:06 GMT","end":"Fri, 17 Apr 2026 10:39:05 GMT"},"fingerprint":{"sha1":"17:40:84:06:58:98:FF:21:15:F1:59:1D:F9:EC:31:CE:B2:08:D3:F4","sha256":"33:C4:78:74:48:FA:C1:CF:D4:8C:CC:3F:DC:6D:16:D0:B1:91:57:84:AE:C5:EC:D1:BD:99:4F:EE:FF:C1:D0:06"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 863365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sat, 17 Jan 2026 11:16:07 GMT\r\naccept-ranges: bytes\r\netag: \"66877ada287dc1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Thu, 12 Feb 2026 12:40:22 GMT\r\ncontent-length: 7365\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":7365,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1f1272b901f676d722cd60665029bfaa","sha1":"9275ef9bf3c7c2a8e340f3322c45073da1aedefe","sha256":"4c2b6f1a0c09af8c2af1ded7d0f81549fb722da2833c4630059e7f8d61339382","sha512":"57e83aefd569f57fa539a8965861cfd692d463fba224841a4b438079803d70b4b94ea5fd81427f3f57359fe80a2c6efee6cbea5b82b7541d24388aa7a79e7814","ssdeep":"192:m9wkF+WT+INmAtoHvG/wgXX+o/Y2pEIzSqHs+D:m9vq5gXuuFEI5t","tlshash":"28e1736314f6103b025390e99baba70e7ad6d107860acd4479fc46864fc7e96ccb36cd","first_seen":"2026-01-19T14:18:09.469723Z","last_seen":"2026-04-03T13:33:05.369609Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1767,"timings":{"blocked":759,"dns":1,"connect":247,"send":0,"wait":247,"receive":1,"ssl":509},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"863365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"863365.cc/style/reset1.css","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://863365.cc/","date":"2026-02-12T12:40:21.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"863365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 10:39:06 GMT","end":"Fri, 17 Apr 2026 10:39:05 GMT"},"fingerprint":{"sha1":"17:40:84:06:58:98:FF:21:15:F1:59:1D:F9:EC:31:CE:B2:08:D3:F4","sha256":"33:C4:78:74:48:FA:C1:CF:D4:8C:CC:3F:DC:6D:16:D0:B1:91:57:84:AE:C5:EC:D1:BD:99:4F:EE:FF:C1:D0:06"}}},"request":{"raw":"GET /style/reset1.css HTTP/1.1\r\nHost: 863365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://863365.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 17 Jan 2026 09:43:08 GMT\r\naccept-ranges: bytes\r\netag: \"303dc7af9587dc1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Thu, 12 Feb 2026 12:40:22 GMT\r\ncontent-length: 4077\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":4077,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b401995fbd288c3b4b2e8f8598374eb5","sha1":"137dc550b11321d1985fc60b912fd71ae6597468","sha256":"106bd94c0da60e38a1ba4022b9ea22a9c2527b657f8bbbf3f493b426fe24c5a7","sha512":"0a71aa2bead98489cb935e31a49957be6313617ec9b9fd09f5885602330704181739c29515a43db2ae5264859e05bed4cce1f839b1f5edebaa6b09d32b38273d","ssdeep":"","tlshash":"f7810f2196b35c41b40a88687f6ab785338c004b8a0fdd7c7fca778c8f851a56566b8d","first_seen":"2026-01-19T14:18:09.485132Z","last_seen":"2026-04-03T13:33:05.373472Z","times_seen":9,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"863365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"863365.cc/style/global1.css","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://863365.cc/","date":"2026-02-12T12:40:21.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"863365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 10:39:06 GMT","end":"Fri, 17 Apr 2026 10:39:05 GMT"},"fingerprint":{"sha1":"17:40:84:06:58:98:FF:21:15:F1:59:1D:F9:EC:31:CE:B2:08:D3:F4","sha256":"33:C4:78:74:48:FA:C1:CF:D4:8C:CC:3F:DC:6D:16:D0:B1:91:57:84:AE:C5:EC:D1:BD:99:4F:EE:FF:C1:D0:06"}}},"request":{"raw":"GET /style/global1.css HTTP/1.1\r\nHost: 863365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://863365.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 17 Jan 2026 09:47:10 GMT\r\naccept-ranges: bytes\r\netag: \"27e357409687dc1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Thu, 12 Feb 2026 12:40:22 GMT\r\ncontent-length: 1138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1138,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"f6eac029bd5a825325159506a29c950c","sha1":"5d600d297be6f4b365017e34240129ab782e3e12","sha256":"0bf147f022f42363eed719745e4620d5eff85a3b07335562af1325d00eae60bc","sha512":"5132768db58374df15b242eddcb1cf7a74e446ab2d454699a5c933cf9e673659d9d22144febfbdfe3854706d7d3ec76ef24e9a583701607ee175363691391e77","ssdeep":"","tlshash":"f121acb39270420a7917cc5027016e75625c901784dfeafd8ee6289cddc65d651e338e","first_seen":"2026-01-19T14:18:09.475906Z","last_seen":"2026-04-03T13:33:05.371577Z","times_seen":9,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"863365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"863365.cc/images/banner1.gif","fqdn":"863365.cc","domain":"863365.cc","tld":"cc"},"ip":{"addr":"103.244.151.208","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://863365.cc/","date":"2026-02-12T12:40:21.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"863365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 10:39:06 GMT","end":"Fri, 17 Apr 2026 10:39:05 GMT"},"fingerprint":{"sha1":"17:40:84:06:58:98:FF:21:15:F1:59:1D:F9:EC:31:CE:B2:08:D3:F4","sha256":"33:C4:78:74:48:FA:C1:CF:D4:8C:CC:3F:DC:6D:16:D0:B1:91:57:84:AE:C5:EC:D1:BD:99:4F:EE:FF:C1:D0:06"}}},"request":{"raw":"GET /images/banner1.gif HTTP/1.1\r\nHost: 863365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://863365.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nlast-modified: Sun, 26 Nov 2023 07:38:47 GMT\r\naccept-ranges: bytes\r\netag: \"809d9973b20da1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Thu, 12 Feb 2026 12:40:22 GMT\r\ncontent-length: 80242\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":80242,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 720 x 365","md5":"984b617d9506234429a87c86ec486235","sha1":"cd93c4f1514a86ace8bc0cbc3cd534548af82758","sha256":"5f47f2a106b737a08aece0df012ddb8864831f33c41f3afb85e2ec829dc84264","sha512":"9e682de79b0275609de525734f7d4e723aaabbe726ca002564226d8cf1a09be6c7586b5994859d181e5360cdcc9992f0a9d3c84a097d3f642cd0a7c580ebc0eb","ssdeep":"1536:U0OizxTJ9ZIeZgA/zq+fr7PiUP1U+1vMt7lHJSFqRBHzJilnDWniPb3f6vF67SSl:jWebW+jLP1hUBMFqrJi1dyYYqvd","tlshash":"387302795aa14e584a54bfd51cbebf676ecf22c05e49b8833d4820c9eabc2510523c6f","first_seen":"2024-09-28T07:18:50.512067Z","last_seen":"2026-05-30T15:22:50.670967Z","times_seen":18,"resource_available":false,"data":null}},"time_used":980,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":737,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-12","alert":"Phishing Block","trigger":"863365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"863365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hcdream.com/berlin/customer-service/kefu78.js","fqdn":"hcdream.com","domain":"hcdream.com","tld":"com"},"ip":{"addr":"45.194.140.3","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://863365.cc/","date":"2026-02-12T12:40:21.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcdream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 10:58:22 GMT","end":"Fri, 10 Apr 2026 10:58:21 GMT"},"fingerprint":{"sha1":"8C:E9:2A:CC:61:DA:12:74:2C:5F:2E:4A:AE:9E:BA:37:8E:BD:A2:55","sha256":"75:C5:36:0F:07:95:10:5A:E2:40:A7:50:B7:1D:71:4D:77:0A:37:25:F8:2D:74:AF:D6:D1:3E:84:72:0B:EC:F6"}}},"request":{"raw":"GET /berlin/customer-service/kefu78.js HTTP/1.1\r\nHost: hcdream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://863365.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 12 Feb 2026 12:40:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 08 Feb 2026 09:43:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69885aad-dc5\"\r\nexpires: Fri, 13 Feb 2026 00:40:22 GMT\r\ncache-control: max-age=43200\r\nset-cookie: SITE_TOTAL_ID=7bfa4491853fbb9db58c28176d985840; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3525,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text","md5":"f1c25042cfb1672fd538373a9094b506","sha1":"231c3dfc68134cd465f575419bf8cc0a74d09f66","sha256":"353cd7dfb2b948b8199a11b6de272f97bf1dca27162ce0090f19f0fd8a8064e1","sha512":"a868cfbf30e842d568fafa7016c50d0d6d61cc3a2bc4b29d6608f15c9459b6fd006e98ea3d66c53d28584eb2c21ef429092ecaf3293425a2bfb44510e63c0893","ssdeep":"","tlshash":"a07152d669a65125440721e96beb3618a17a706fff07ed61374cc98c0f85cc7a01e589","first_seen":"2026-02-12T12:27:11.082879Z","last_seen":"2026-04-03T13:33:05.379419Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1132,"timings":{"blocked":458,"dns":49,"connect":205,"send":0,"wait":206,"receive":0,"ssl":211},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
