{"report_id":"0e6bf14e-0ee6-493f-ba8f-8c2b054816c6","version":0,"status":"done","tags":[],"date":"2026-07-12T22:26:29Z","url":{"schema":"https","addr":"www.apps-quark.cn/","fqdn":"www.apps-quark.cn","domain":"apps-quark.cn","tld":"cn"},"ip":{"addr":"47.76.28.151","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"www.apps-quark.cn/","fqdn":"www.apps-quark.cn","domain":"apps-quark.cn","tld":"cn"},"title":"夸克官网 · 免费好用的智能AI浏览器","dom":{"size":623,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"27e92a7d36ca564cd44ee526f56a0d70","sha1":"fc8f8f1d08b272348832d7164634ab04bf20c884","sha256":"f995b12f89f2301c11d74b8e44e7a27afe630738d98097983f87a98695a470d3","sha512":"841e53786881bbe343f6f81f39a32761c2595d298a578ac0c9ac5789011330ab14d7cfbec4adedb27184747dbc9cf8ffc9a8998f3644c9e4839fbbfb6bc47594","ssdeep":"","tlshash":"57f0ac53b4104c5882d0dbb12eddf30fa4f4842aab1c5d40b8d6adfdbc6db4b44a3998","dom_hash":"domhashb946719160702c25aaa154b32fb60e83","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.apps-quark.cn/","fqdn":"www.apps-quark.cn","domain":"apps-quark.cn","tld":"cn"},"ip":{"addr":"47.76.28.151","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T22:26:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.apps-quark.cn","ip":{"addr":"47.76.28.151","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-06-10","domain_rank":0,"first_seen":"2026-07-09T20:04:45.030714Z","last_seen":"2026-07-09T20:04:45.030714Z","alert_count":16,"request_count":8,"received_data":256238,"sent_data":4096,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"via.placeholder.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2002-05-05","domain_rank":229550,"first_seen":"2017-06-01T15:41:00Z","last_seen":"2026-07-11T20:50:21.345468Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":610,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":449984,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-07-07T13:00:30.828297Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":474,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.apps-quark.cn/img/ipad.png","fqdn":"www.apps-quark.cn","domain":"apps-quark.cn","tld":"cn"},"ip":{"addr":"47.76.28.151","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.apps-quark.cn/","date":"2026-07-12T22:25:55.975Z","timestamp":1783895155975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.apps-quark.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 05:30:02 GMT","end":"Mon, 28 Sep 2026 05:30:01 GMT"},"fingerprint":{"sha1":"F0:84:EA:71:B7:DC:94:99:39:82:13:BA:B0:B0:C4:F2:4C:5A:62:AB","sha256":"5C:A9:67:A6:68:4C:C7:35:65:70:61:F6:B1:26:89:6F:A1:E1:2F:A4:27:8C:CF:93:DA:C5:C2:8E:37:FB:42:6A"}}},"request":{"raw":"GET /img/ipad.png HTTP/1.1\r\nHost: www.apps-quark.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.apps-quark.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:25:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 16:58:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a25a346-71cb\"\r\nexpires: Tue, 11 Aug 2026 22:25:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29131,"size_decoded":28015,"mime_type":"image/png","magic":"PNG image data, 440 x 364, 8-bit/color RGBA, interlaced","md5":"4c84e24060df47f077fdfa2a716d1e48","sha1":"2411e5c2ed08b5ee55ae45e77ddfbeb6191e8017","sha256":"ef8c02fd0862076719fb0fc49d0ed4840e76e09f162d4d2ea00a4751ad9b6b5e","sha512":"888d529fe2a861c24c996d36a9061efd4e6a99f67fd56b2440238d080b367add26f60105d7edd1b25a7439d6298d6bd2e4c7c9c4ef2dbfb61261e78fc0d5362a","ssdeep":"768:3VKsy5Dxwne57ehDnKbnQ4GYJB7wK16PJR:FKJ511eln+JBJCKWR","tlshash":"b1d29c4006aa7fdae635da1a4c0f1af0827425dff30fd09d06696ba5fc12a0f947f165","first_seen":"2026-07-04T12:46:42.197539Z","last_seen":"2026-07-12T22:26:40.28575Z","times_seen":4,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.apps-quark.cn/img/liulanqichajian.png","fqdn":"www.apps-quark.cn","domain":"apps-quark.cn","tld":"cn"},"ip":{"addr":"47.76.28.151","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.apps-quark.cn/","date":"2026-07-12T22:25:55.979Z","timestamp":1783895155979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.apps-quark.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 05:30:02 GMT","end":"Mon, 28 Sep 2026 05:30:01 GMT"},"fingerprint":{"sha1":"F0:84:EA:71:B7:DC:94:99:39:82:13:BA:B0:B0:C4:F2:4C:5A:62:AB","sha256":"5C:A9:67:A6:68:4C:C7:35:65:70:61:F6:B1:26:89:6F:A1:E1:2F:A4:27:8C:CF:93:DA:C5:C2:8E:37:FB:42:6A"}}},"request":{"raw":"GET /img/liulanqichajian.png HTTP/1.1\r\nHost: www.apps-quark.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.apps-quark.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:25:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 16:58:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a25a346-da72\"\r\nexpires: Tue, 11 Aug 2026 22:25:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55922,"size_decoded":54631,"mime_type":"image/png","magic":"PNG image data, 440 x 364, 8-bit/color RGBA, interlaced","md5":"56ac854f13b1555afe37593b063505b7","sha1":"2c22e4869e4a3cf1e4c953e53b4afe4c556c1057","sha256":"40bef63004bbc47d6f52b0e87727f112e214aadc17ccdbe4335384b4c72ffcac","sha512":"a53400518056e4ead1e18b962afc4f52ea8bfb5511b59eddf55b79e704768320f43649af0c45f40c7e0adb0df6b8e0174730793c18803a51bc5f258d51eae8e1","ssdeep":"1536:fzMvpr5zh2b1szpXUJxGFb7XF8J8dHsWe:folZh2QerW/XFpdHsZ","tlshash":"d843df38abcbb5b3643897f1d31341b14e3f7190da94492aa5cf4662bc472ee9d0e8c5","first_seen":"2026-07-04T12:46:42.183778Z","last_seen":"2026-07-12T22:26:40.287094Z","times_seen":4,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"via.placeholder.com/900x506/e6e9ff/6a5acd?text=%E8%A7%86%E9%A2%91%E5%8A%A0%E8%BD%BD%E4%B8%AD...","fqdn":"via.placeholder.com","domain":"placeholder.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.apps-quark.cn/","date":"2026-07-12T22:25:55.971Z","timestamp":1783895155971,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /900x506/e6e9ff/6a5acd?text=%E8%A7%86%E9%A2%91%E5%8A%A0%E8%BD%BD%E4%B8%AD... HTTP/1.1\r\nHost: via.placeholder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.apps-quark.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T04:39:01.448577Z","times_seen":17329118,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.apps-quark.cn/img/pc.png","fqdn":"www.apps-quark.cn","domain":"apps-quark.cn","tld":"cn"},"ip":{"addr":"47.76.28.151","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.apps-quark.cn/","date":"2026-07-12T22:25:55.977Z","timestamp":1783895155977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.apps-quark.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 05:30:02 GMT","end":"Mon, 28 Sep 2026 05:30:01 GMT"},"fingerprint":{"sha1":"F0:84:EA:71:B7:DC:94:99:39:82:13:BA:B0:B0:C4:F2:4C:5A:62:AB","sha256":"5C:A9:67:A6:68:4C:C7:35:65:70:61:F6:B1:26:89:6F:A1:E1:2F:A4:27:8C:CF:93:DA:C5:C2:8E:37:FB:42:6A"}}},"request":{"raw":"GET /img/pc.png HTTP/1.1\r\nHost: www.apps-quark.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.apps-quark.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:25:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 17:00:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a25a39e-a761\"\r\nexpires: Tue, 11 Aug 2026 22:25:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42849,"size_decoded":41866,"mime_type":"image/png","magic":"PNG image data, 440 x 364, 8-bit/color RGBA, interlaced","md5":"530e0ce51e74158f210218f28933d1ad","sha1":"ec68bb630d39bf489552d57510399fecee549cc2","sha256":"67957d5221ddc42fdda46264ffb34738860d5ff02b8001b9f376a83e9766d2ea","sha512":"4e964821627bcc5066ea9b81486c56455fa5ac787169c5a71065fc624b4eea3e524e14d4b012539e7024a1721d5b1044306f7cd47d6c61811e18c5663ccaf61c","ssdeep":"768:eqIIdjdtvyi8IMvzlMp4VhraGyA+IGq3Oi1Qr7sUv+B7P7h3cjCZ:TIydtvh8jvRMp4TBX4qeaQrAxl1n","tlshash":"4313cf719ee9b55a08b572f1e02701f06f0e72c2ff5399ad8d6b80743c6b45e1c066da","first_seen":"2026-07-04T12:46:42.191575Z","last_seen":"2026-07-12T22:26:40.288813Z","times_seen":4,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.apps-quark.cn/img/kuakewangpan.png","fqdn":"www.apps-quark.cn","domain":"apps-quark.cn","tld":"cn"},"ip":{"addr":"47.76.28.151","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.apps-quark.cn/","date":"2026-07-12T22:25:55.982Z","timestamp":1783895155982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.apps-quark.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 05:30:02 GMT","end":"Mon, 28 Sep 2026 05:30:01 GMT"},"fingerprint":{"sha1":"F0:84:EA:71:B7:DC:94:99:39:82:13:BA:B0:B0:C4:F2:4C:5A:62:AB","sha256":"5C:A9:67:A6:68:4C:C7:35:65:70:61:F6:B1:26:89:6F:A1:E1:2F:A4:27:8C:CF:93:DA:C5:C2:8E:37:FB:42:6A"}}},"request":{"raw":"GET /img/kuakewangpan.png HTTP/1.1\r\nHost: www.apps-quark.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.apps-quark.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:25:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 16:58:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a25a346-d60c\"\r\nexpires: Tue, 11 Aug 2026 22:25:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54796,"size_decoded":53648,"mime_type":"image/png","magic":"PNG image data, 440 x 364, 8-bit/color RGBA, interlaced","md5":"1cb2de587ffb324a35738b647856edaf","sha1":"2dc597920fb69684aca32531fa25cba09467da63","sha256":"6c64d5ac191f35353d7b75f1cbe96fa6e62388ad846e3dd81809605cb5b8f637","sha512":"f3b78d401757c8a40cf5e0d1e6aeb021d229ad7f2d3c8c0ff2d2fbcad989a1d522366e4f278500a5c090e4c578cb854f381fce9066570ebd085c6e5c90d75082","ssdeep":"768:Tt0AAtu3jJQ6laFpT6ADdnjuY8iuvRRRgsVMupD7kwu+0LNUG/n1VOuNxi2SBwhh:utSjaFBnDQpRPV98+0vvO4xiPwbGg3","tlshash":"7633df265182b5624f3069f0c50754f8df303cddc569260e187a267b3c9b38e8da75eb","first_seen":"2026-07-04T12:46:42.193204Z","last_seen":"2026-07-12T22:26:40.289913Z","times_seen":4,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.apps-quark.cn/favicon.png","fqdn":"www.apps-quark.cn","domain":"apps-quark.cn","tld":"cn"},"ip":{"addr":"47.76.28.151","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.apps-quark.cn/","date":"2026-07-12T22:25:58.862Z","timestamp":1783895158862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.apps-quark.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 05:30:02 GMT","end":"Mon, 28 Sep 2026 05:30:01 GMT"},"fingerprint":{"sha1":"F0:84:EA:71:B7:DC:94:99:39:82:13:BA:B0:B0:C4:F2:4C:5A:62:AB","sha256":"5C:A9:67:A6:68:4C:C7:35:65:70:61:F6:B1:26:89:6F:A1:E1:2F:A4:27:8C:CF:93:DA:C5:C2:8E:37:FB:42:6A"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: www.apps-quark.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.apps-quark.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:25:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 17:33:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a25ab71-4ba\"\r\nexpires: Tue, 11 Aug 2026 22:25:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1210,"size_decoded":1752,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"cd7dcf884b977f123d0be8a5861e980b","sha1":"0b4833a042915a984992c191d91abecd12e486c6","sha256":"824e079d7d987305f2a0d15de5b1dfe0dc8cb7131afe1dbdaf1ea3ae3dd2d740","sha512":"d2fcb414ab643d1bad88eb9a890c10586366e527cecc3772cd96095be157dc2227a633d2d3a829b095284ab56f013c6edaa61b435e1974549ea0e6d9d1a66b29","ssdeep":"","tlshash":"ee210ab3b59f67b0e81d242003fcb618c848f4c697aa05a2380ac50f024d058c3b4e47","first_seen":"2025-06-23T00:30:01.689638Z","last_seen":"2026-07-12T22:26:40.290583Z","times_seen":5,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.apps-quark.cn/","fqdn":"www.apps-quark.cn","domain":"apps-quark.cn","tld":"cn"},"ip":{"addr":"47.76.28.151","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T22:25:53.077Z","timestamp":1783895153077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.apps-quark.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 05:30:02 GMT","end":"Mon, 28 Sep 2026 05:30:01 GMT"},"fingerprint":{"sha1":"F0:84:EA:71:B7:DC:94:99:39:82:13:BA:B0:B0:C4:F2:4C:5A:62:AB","sha256":"5C:A9:67:A6:68:4C:C7:35:65:70:61:F6:B1:26:89:6F:A1:E1:2F:A4:27:8C:CF:93:DA:C5:C2:8E:37:FB:42:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.apps-quark.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:25:55 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 30 Jun 2026 06:38:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a436448-5b11\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23313,"size_decoded":7461,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (494)","md5":"11360b8d80a1c7d2a3366b870d6ed24d","sha1":"dcadbe483283bbd9c383bb3406ac652c16447ec3","sha256":"f55f6fe5fb8aa8d505fc957b35fb00f5e72f47cc27243e1cfe402873a1dd29a0","sha512":"7fd67d4863ce67a323586ce776ec46d463a3cef9c88fc3409bb00f196ae63c8e5aa3e266f4afc4da3845252541299904d5b597c4f768ee0100966fd85ddebe86","ssdeep":"384:fK2Izj1ZT1ecuMB8O9kIIHjJ9woDqINAUnkEfZ6KH4S:iDzj1ZT1ecuMB8hIIHjjJDqINAqkG6KN","tlshash":"6da2b41371f0202a6527d2a67fe7071e2736d043e50a896875ac029cdfcebd549e3b8e","first_seen":"2026-07-09T20:04:50.719568Z","last_seen":"2026-07-12T22:26:40.291263Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2362,"timings":{"blocked":-1,"dns":1299,"connect":265,"send":0,"wait":265,"receive":0,"ssl":533},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans+SC:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.apps-quark.cn/","date":"2026-07-12T22:25:55.944Z","timestamp":1783895155944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Noto+Sans+SC:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.apps-quark.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 22:25:56 GMT\r\ndate: Sun, 12 Jul 2026 22:25:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":449300,"size_decoded":124334,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (934)","md5":"f54afecc68412629e0359ee1f6e28086","sha1":"b9b1fa4a487b24f7895d23cb5cd55b9648206c68","sha256":"07c6b2503c74a9106f392b4db580ac134658a1e3dbff06d69c0b0835d0110478","sha512":"5025c9f3e35f052f15d9111cc2d30b8c55ac22f8a664859a0d3edf5251fab53f2fc58ed692615ff3c0c7b60f3ebcd4ea63c8c5dfeb81bca0e44ae0c9ec122d1f","ssdeep":"3072:gCfhEV6sqCfkTgoTjJnq7pPEjgkzO7Mor1I9E+GkZkbsOCeXB81u46GDkLgsN:bfhc6QszJnkpOP2r10EYCTXB0uA4V","tlshash":"88a4fca5460795cffde75ca352ced8147ea968bcf980893c52f519d3ac0a01ad0dbb8c","first_seen":"2026-01-10T21:51:35.376668Z","last_seen":"2026-07-17T12:31:53.733984Z","times_seen":153,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":42,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.apps-quark.cn/","date":"2026-07-12T22:25:55.946Z","timestamp":1783895155946,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.apps-quark.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T04:39:01.448577Z","times_seen":17329118,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.apps-quark.cn/img/logo.png","fqdn":"www.apps-quark.cn","domain":"apps-quark.cn","tld":"cn"},"ip":{"addr":"47.76.28.151","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.apps-quark.cn/","date":"2026-07-12T22:25:55.969Z","timestamp":1783895155969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.apps-quark.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 05:30:02 GMT","end":"Mon, 28 Sep 2026 05:30:01 GMT"},"fingerprint":{"sha1":"F0:84:EA:71:B7:DC:94:99:39:82:13:BA:B0:B0:C4:F2:4C:5A:62:AB","sha256":"5C:A9:67:A6:68:4C:C7:35:65:70:61:F6:B1:26:89:6F:A1:E1:2F:A4:27:8C:CF:93:DA:C5:C2:8E:37:FB:42:6A"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: www.apps-quark.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.apps-quark.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:25:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 17:19:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a25a80d-554\"\r\nexpires: Tue, 11 Aug 2026 22:25:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1364,"size_decoded":1803,"mime_type":"image/png","magic":"PNG image data, 142 x 56, 8-bit colormap, non-interlaced","md5":"82242a10f49ace8b16531a7308145774","sha1":"b74e922685fa6ee80573ebb6a7f21b89925a7bea","sha256":"b5b95cf284a8fb23a6cff192b710f32193817de556e3a307cab46a0820b6e897","sha512":"32cf047527a3655babb150211a1125c518a04199028dccad759558548db12a913550aefcc8bed0ec7bf7f451fe00c9e54358359faa91b157ef06baa0f5737aa7","ssdeep":"","tlshash":"cb21a5fd9dce98fab7d142a318f39980f6842270e01a851da2c6688c48673b47552363","first_seen":"2026-07-04T12:46:42.196613Z","last_seen":"2026-07-12T22:26:40.293215Z","times_seen":4,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.apps-quark.cn/img/ios.png","fqdn":"www.apps-quark.cn","domain":"apps-quark.cn","tld":"cn"},"ip":{"addr":"47.76.28.151","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.apps-quark.cn/","date":"2026-07-12T22:25:55.973Z","timestamp":1783895155973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.apps-quark.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 05:30:02 GMT","end":"Mon, 28 Sep 2026 05:30:01 GMT"},"fingerprint":{"sha1":"F0:84:EA:71:B7:DC:94:99:39:82:13:BA:B0:B0:C4:F2:4C:5A:62:AB","sha256":"5C:A9:67:A6:68:4C:C7:35:65:70:61:F6:B1:26:89:6F:A1:E1:2F:A4:27:8C:CF:93:DA:C5:C2:8E:37:FB:42:6A"}}},"request":{"raw":"GET /img/ios.png HTTP/1.1\r\nHost: www.apps-quark.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.apps-quark.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:25:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 16:58:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a25a346-aa57\"\r\nexpires: Tue, 11 Aug 2026 22:25:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43607,"size_decoded":43174,"mime_type":"image/png","magic":"PNG image data, 440 x 364, 8-bit/color RGBA, interlaced","md5":"e1b466fc35df30cfd3ca8755c7597040","sha1":"7733463bb17b7b714543a750e9dceffab8c6597a","sha256":"5cd2fb15772c8659194a182d945ba0f24e3f538285423405ff4c98613d4c622d","sha512":"d4be0a31c49cbc0ab4b6841d18707bed90b68c7f007af3f2a92f08b3affb74b9887521de76b20a4e9ee1fd07b4d50a8c63c005de12dec0da460df3ec70c3bc11","ssdeep":"768:azwuw6iyNCfctHWJHZTHTafCTJz8eaI4uZy3tPFdCBKmlQu37f6X09:aED6zNptHWtJpTJz8u09P+lQC7f6XC","tlshash":"0b13f145ef34ba6ee833be681ff68414fda6f62c074a48ed206d36a64516bd1388013d","first_seen":"2026-07-04T12:46:42.189649Z","last_seen":"2026-07-12T22:26:40.293957Z","times_seen":4,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"www.apps-quark.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}