{"report_id":"13e82c56-6deb-4490-9057-9fcf3c289eff","version":6,"status":"done","tags":[],"date":"2026-01-14T14:55:47Z","url":{"schema":"https","addr":"base88.cc","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"base88.cc/","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"title":"base88.cc/","dom":{"size":3473,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (882)","md5":"df325c3a76c082c1f5313b1a647cf857","sha1":"e9715bacfaa66b189afe3ec1723e8d25b7339eec","sha256":"a87aaae3bf8aeeddd202ec59b0c61c0bcf6e241b91a692da1b18dcd81295285e","sha512":"97b475e3c1e8866437e07ef9e8a9136a4796a7062b99f1ecf48137f60f898bf0bd292862ecc6e4cb51f116f8a2660b3e8512a58cf16b7656bb2c89735ebc0b99","ssdeep":"","tlshash":"cc611252c404ca0b671172d8fe57699cc082e44cc58e3c3494ae01a6e8f6ef25eb76bf","dom_hash":"domhash87c7669bb4704a2d211def81bc924fb5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"base88.cc","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-18T14:55:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"base88.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"base88.cc","ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-11","domain_rank":0,"first_seen":"2026-01-14T14:55:48.736775Z","last_seen":"2026-01-14T14:55:48.736775Z","alert_count":13,"request_count":13,"received_data":2825849,"sent_data":5840,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"base88.cc/syn/js/index-27d62f06.js","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91ec0eafcf0f4666ab9bb796bc798b6c","sha1":"e7134ee07a7a907bd49ed7acab7349e09985b8bf","sha256":"ede018ba60898810312b1ad0d12ccad7528c643fb7bff32a100f11b3f28c02f0","sha512":"088563f4fc67b65264b0c01fa3cfa68599e9fa2b2a74204dd09c19fe0aafb254a05e790f035cbcf5179b70ef2027b54faac501d3fb6199161cc1ae45bfbaa39e","ssdeep":"49152:lxdS5FC5GaUJPPW289j9zrt7tM7z0PqK9XNlFVh9eDQVtddhwU1oXq:EPr89j9nt7tM7oPqKVF/9eDetDP","tlshash":"bca58e7f72c6aab814460751211f328422799e4afb53f4d044eda46d22f9b8bc163ff6","size":2209211,"data":"","first_seen":"2026-01-14T14:55:52.423054Z","last_seen":"2026-01-14T14:55:52.423054Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/syn/js/index-c73607b8.js","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d241fdeecd062f67dd71a2ac8b4b4c9c","sha1":"7735f8670708f662a4b104aaa79541ed65715872","sha256":"d18fd3c8086d9981cbb21e1ecbc039310f2e4668100eb33339a8f8708d259afe","sha512":"21b4112c3fe663bd7da1a439bb7931eb4540d287255178793c6d86e0f2e20ca354c13c0077a2e2be9e465b8dea5c8a9283ebe576d3f59fe8a8d67162a3bdcdba","ssdeep":"","tlshash":"4231525678c8d63c7f87d18851798920e60c2b6edab033fdcbb92875d3ae1947024f22","size":1479,"data":"","first_seen":"2026-01-14T14:55:52.4119Z","last_seen":"2026-01-14T14:55:52.4119Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/syn/js/index-login-6545034d.js","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9ce1c8784a681b1eb6eedd3c4770bad","sha1":"a6bb5abbd495378bca4244fe1364c9b993956a13","sha256":"4240f0981364ba3d86e198a5e29fd5467f1e245c35556f939519d00848b50fea","sha512":"f784001c3aa08bb7fd9c4242043ad2c8d0d969e057da053af8ce66e047188adf83e8cf5919b3e584bd6e7db7a955e206b21c1b8d22dfe1cdbbcad9d1e8eb68c8","ssdeep":"","tlshash":"7b21622c3428c23d958744dc756452a430fa7854f352c98eb53ca62a5b71db183bebac","size":1295,"data":"","first_seen":"2026-01-14T14:55:52.409163Z","last_seen":"2026-01-14T14:55:52.409163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"93b5e810b1b9240fedee29e589a1baf7","sha1":"d8cd0bba7ed3746d880e94d656aaa6fef92c6985","sha256":"502f96cb8b01b97db002c54ad99246d9e6f07c9f70fec3e894888ab61fdb9749","sha512":"48102be206786ef034700b958b003a084072264f45f19063336b2fd7529b56209b896f52f9052443f1ba71f63ac69ce3041594c7ea081e9521b92b7c34605ae6","ssdeep":"","tlshash":"40c080de639b4102012134699987310d1237405b4c3d5d02350c4f04bfd557b4177f5f","size":164,"data":"","first_seen":"2026-01-14T14:55:52.425373Z","last_seen":"2026-01-14T14:55:52.425373Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"base88.cc/favicon.ico","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://base88.cc/","date":"2026-01-14T14:55:26.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base88.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:09:23 GMT","end":"Sat, 11 Apr 2026 21:08:12 GMT"},"fingerprint":{"sha1":"7D:95:5D:FA:AE:7B:1B:2B:31:CE:AF:C6:BF:C4:E5:03:C2:91:FD:2D","sha256":"CA:67:F6:AD:4D:08:6A:13:9B:C6:0B:7B:BD:56:21:A6:C1:43:5A:F4:24:C7:FE:7F:A8:CB:BD:F0:5B:7C:FC:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: base88.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://base88.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:55:26 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0iVCOUanjpOP7z9DQ2C09CgBdY%2F4oiDETxuLzgB50bYgBZTWy6SzDeR8t5hGIxImgZeBRGpvoFmXq5g5ASXohTjdhygO7BM%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bddf96e6ba4b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-22T14:23:53.604879Z","times_seen":542833,"resource_available":true,"data":null}},"time_used":524,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"base88.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/syn/","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://base88.cc/","date":"2026-01-14T14:55:26.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base88.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:09:23 GMT","end":"Sat, 11 Apr 2026 21:08:12 GMT"},"fingerprint":{"sha1":"7D:95:5D:FA:AE:7B:1B:2B:31:CE:AF:C6:BF:C4:E5:03:C2:91:FD:2D","sha256":"CA:67:F6:AD:4D:08:6A:13:9B:C6:0B:7B:BD:56:21:A6:C1:43:5A:F4:24:C7:FE:7F:A8:CB:BD:F0:5B:7C:FC:7F"}}},"request":{"raw":"GET /syn/ HTTP/1.1\r\nHost: base88.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://base88.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:55:26 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 11 Jan 2026 19:37:25 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rxVRaLche%2FEwtxB25TOKXMHbJpRY%2F0%2Fi%2B4R%2B%2BDgcD3bY9%2FE54wl9SH0r8T73DFyoOifD68%2BrqiJg07ijWO3pQldIJ79gyBE%3D\"}]}\r\ncf-ray: 9bddf96f8bbab50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2219,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"71ed4c4e4c3146c467cf860c421c4198","sha1":"71cc2d5060be06d871bd96596694a7983efd1591","sha256":"a6d4af76c067261cbf3b4ca9d4738f37ae833fb103901f534d09f2fb1f5d5bc0","sha512":"c2200efe987d9a64a3bfaec0d3e7aa8cdb098d30a89d4e2990a2b93081d43375d8433dc06a90be7ef550d01a0919efaa8e1c4260113029d576a5e22095fc23da","ssdeep":"","tlshash":"5c413953c505c906ab1072edfe53659cc042a85cc59e2c38a49e4126e8f1ef69fb36bf","first_seen":"2026-01-14T14:55:52.400333Z","last_seen":"2026-01-14T14:55:52.400333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"base88.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/syn/js/index-27d62f06.js","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://base88.cc/syn/","date":"2026-01-14T14:55:26.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base88.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:09:23 GMT","end":"Sat, 11 Apr 2026 21:08:12 GMT"},"fingerprint":{"sha1":"7D:95:5D:FA:AE:7B:1B:2B:31:CE:AF:C6:BF:C4:E5:03:C2:91:FD:2D","sha256":"CA:67:F6:AD:4D:08:6A:13:9B:C6:0B:7B:BD:56:21:A6:C1:43:5A:F4:24:C7:FE:7F:A8:CB:BD:F0:5B:7C:FC:7F"}}},"request":{"raw":"GET /syn/js/index-27d62f06.js HTTP/1.1\r\nHost: base88.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://base88.cc/syn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:55:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 11 Jan 2026 19:37:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6963fbf1-21b5bb\"\r\nexpires: Thu, 15 Jan 2026 02:55:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sf3gNFLwpBYxb4yiszr6JMqczyl1mqdlg%2Fv6nF%2FwytE69SDc3ys5easQmVn4L%2BBxN5TUbn%2BiEpUyzy9oLjJb%2FOWh%2B0d5Naw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bddf970abc9b50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2209211,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"79de51859e3f6ecf03845c592362b23f","sha1":"9680cbd7478f1ab323dc369e691d83e1fdd9c433","sha256":"fa80774f17efb6da5f5536f52e6a2f39076fe842f2df884c820755f61b653a67","sha512":"fa0809230bf521018ebcd8d5ded9f8e279a4687ddde4040fc0ec212e45b1f27dafa0a49f60390bde81fcfda806de63e4fcf5e4bf4666cddccbbb6356a9324635","ssdeep":"24576:lJQcZf1S5FC5GaUJPPbK62Nu9LHwU9zt9qNtnwkSwzaCatJ29XtHlPwO+9:lxdS5FC5GaUJPPl289j9zMtzlzaPtJ2m","tlshash":"92658d4df3c7d3b447c242f0292622906278c6cbe59fa1144baedce8357ee9d81879b5","first_seen":"2026-01-14T14:55:52.402438Z","last_seen":"2026-01-14T14:55:52.402438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":769,"receive":773,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"base88.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/syn/css/name-4291f9c2.css","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://base88.cc/syn/","date":"2026-01-14T14:55:28.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base88.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:09:23 GMT","end":"Sat, 11 Apr 2026 21:08:12 GMT"},"fingerprint":{"sha1":"7D:95:5D:FA:AE:7B:1B:2B:31:CE:AF:C6:BF:C4:E5:03:C2:91:FD:2D","sha256":"CA:67:F6:AD:4D:08:6A:13:9B:C6:0B:7B:BD:56:21:A6:C1:43:5A:F4:24:C7:FE:7F:A8:CB:BD:F0:5B:7C:FC:7F"}}},"request":{"raw":"GET /syn/css/name-4291f9c2.css HTTP/1.1\r\nHost: base88.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://base88.cc/syn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:55:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 11 Jan 2026 19:37:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6963fbf5-1d5e\"\r\nexpires: Thu, 15 Jan 2026 02:55:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHWO1Uy%2BYPz5gQ%2F3IO2uc2ML4RzNm7I2sps%2BJsCzguNSocAhroLhNihv2MLiV4yLun0hOlxLXsuSuK4URDfp%2BAbOSTiujMw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bddf97b8c2bb50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7518,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7517)","md5":"24934ee77f4ec309dade37c1326b52ec","sha1":"84c8416962b2e34840fc9b1fcca0b8c19e4ff809","sha256":"4291f9c234694c22deb1c8d9508e1de34a5e3b1518e43aa4cdb9e2dfa23ba84f","sha512":"c8184ea1ee42cdccf255a006eb6b2ea32826b092762917f21d20e38c637c00b742268deda8ab2661c8d30782a124e71138ae4b7fb813c96546760a6690efb0d4","ssdeep":"192:J3bsGUIEQCQwo7er1uAq28lXwo7er1mZcbc:CVIEQCho7eG5lAo7efY","tlshash":"c8f18793f189943e3557c8fd2ab8ea19510cb222e6495ffc772cb0b075876e611b3493","first_seen":"2026-01-14T14:55:52.405174Z","last_seen":"2026-01-14T14:55:52.405174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"base88.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/syn/css/name-3e38d813.css","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://base88.cc/syn/","date":"2026-01-14T14:55:28.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base88.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:09:23 GMT","end":"Sat, 11 Apr 2026 21:08:12 GMT"},"fingerprint":{"sha1":"7D:95:5D:FA:AE:7B:1B:2B:31:CE:AF:C6:BF:C4:E5:03:C2:91:FD:2D","sha256":"CA:67:F6:AD:4D:08:6A:13:9B:C6:0B:7B:BD:56:21:A6:C1:43:5A:F4:24:C7:FE:7F:A8:CB:BD:F0:5B:7C:FC:7F"}}},"request":{"raw":"GET /syn/css/name-3e38d813.css HTTP/1.1\r\nHost: base88.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://base88.cc/syn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:55:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 11 Jan 2026 19:37:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6963fbf4-1549\"\r\nexpires: Thu, 15 Jan 2026 02:55:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jZAsnybjjl0S%2F3R63HLXDbjw06zLxEH5m11CrGt0rLWXyCHXR8%2BMpQqpkayM9bGsc1DHkDxn38%2BXzGxv21soq8Or7tJwn7A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bddf97b8c2cb50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5449,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5448)","md5":"506b3d0631784cef53da2b3552add17c","sha1":"11e0a65cb5a08ea96e4b339cb3d238490c8aeb55","sha256":"3e38d813c894a21de48197bef15f3e96e4428699130aaf42250c56e98abe6ce0","sha512":"b8356f7366f9e932a2b0d9ffb329090191de1104201a765cb689e90986271ffcb247125d70fa2fdbdca8136bbb491c14609f184fc90ca688f1dc7a18da5d7852","ssdeep":"96:Er8Mn/Kl272RW/7Kol1geoR2Mf/FOWY8Zhpx+:WC4zD+e3w0WYOZ+","tlshash":"91b1e6e7a59083bc2f16bb68531b8ad8737cede08c00f654b544a3e319cf6b7152a257","first_seen":"2025-06-25T13:29:05.894662Z","last_seen":"2026-06-24T06:42:59.825149Z","times_seen":24,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"base88.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/syn/js/index-login-6545034d.js","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://base88.cc/syn/","date":"2026-01-14T14:55:28.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base88.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:09:23 GMT","end":"Sat, 11 Apr 2026 21:08:12 GMT"},"fingerprint":{"sha1":"7D:95:5D:FA:AE:7B:1B:2B:31:CE:AF:C6:BF:C4:E5:03:C2:91:FD:2D","sha256":"CA:67:F6:AD:4D:08:6A:13:9B:C6:0B:7B:BD:56:21:A6:C1:43:5A:F4:24:C7:FE:7F:A8:CB:BD:F0:5B:7C:FC:7F"}}},"request":{"raw":"GET /syn/js/index-login-6545034d.js HTTP/1.1\r\nHost: base88.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://base88.cc/syn/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:55:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 11 Jan 2026 19:37:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6963fbf3-50f\"\r\nexpires: Thu, 15 Jan 2026 02:55:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FhIufmSCGCe4yKp8UEFpAzQzyOuGOR%2F9tlO4cS%2F21WBnEUT%2Bl7LuHBGUHLuluyH%2Ft%2BuJlDo%2B88W9aKJUe95Re3aS%2BrsMI%2Fo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bddf97b8c2db50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1295,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1294)","md5":"a9ce1c8784a681b1eb6eedd3c4770bad","sha1":"a6bb5abbd495378bca4244fe1364c9b993956a13","sha256":"4240f0981364ba3d86e198a5e29fd5467f1e245c35556f939519d00848b50fea","sha512":"f784001c3aa08bb7fd9c4242043ad2c8d0d969e057da053af8ce66e047188adf83e8cf5919b3e584bd6e7db7a955e206b21c1b8d22dfe1cdbbcad9d1e8eb68c8","ssdeep":"","tlshash":"7b21622c3428c23d958744dc756452a430fa7854f352c98eb53ca62a5b71db183bebac","first_seen":"2026-01-14T14:55:52.409163Z","last_seen":"2026-01-14T14:55:52.409163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"base88.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/syn/js/index-c73607b8.js","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://base88.cc/syn/","date":"2026-01-14T14:55:28.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base88.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:09:23 GMT","end":"Sat, 11 Apr 2026 21:08:12 GMT"},"fingerprint":{"sha1":"7D:95:5D:FA:AE:7B:1B:2B:31:CE:AF:C6:BF:C4:E5:03:C2:91:FD:2D","sha256":"CA:67:F6:AD:4D:08:6A:13:9B:C6:0B:7B:BD:56:21:A6:C1:43:5A:F4:24:C7:FE:7F:A8:CB:BD:F0:5B:7C:FC:7F"}}},"request":{"raw":"GET /syn/js/index-c73607b8.js HTTP/1.1\r\nHost: base88.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://base88.cc/syn/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:55:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 11 Jan 2026 19:37:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6963fbf1-5c7\"\r\nexpires: Thu, 15 Jan 2026 02:55:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SB0gbDr%2BMmkwNOwkOx1i1AHUg99wJqTkxk%2FBWUFhkylkrgiddDpDHhFEkXP56XjQeddwrtiv3lFNWZ6AeTaJNNy9Ir7kRgk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bddf97b8c2eb50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1479,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1478)","md5":"d241fdeecd062f67dd71a2ac8b4b4c9c","sha1":"7735f8670708f662a4b104aaa79541ed65715872","sha256":"d18fd3c8086d9981cbb21e1ecbc039310f2e4668100eb33339a8f8708d259afe","sha512":"21b4112c3fe663bd7da1a439bb7931eb4540d287255178793c6d86e0f2e20ca354c13c0077a2e2be9e465b8dea5c8a9283ebe576d3f59fe8a8d67162a3bdcdba","ssdeep":"","tlshash":"4231525678c8d63c7f87d18851798920e60c2b6edab033fdcbb92875d3ae1947024f22","first_seen":"2026-01-14T14:55:52.4119Z","last_seen":"2026-01-14T14:55:52.4119Z","times_seen":1,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"base88.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/syn/js/index-c73607b8.js","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://base88.cc/syn/","date":"2026-01-14T14:55:29.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base88.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:09:23 GMT","end":"Sat, 11 Apr 2026 21:08:12 GMT"},"fingerprint":{"sha1":"7D:95:5D:FA:AE:7B:1B:2B:31:CE:AF:C6:BF:C4:E5:03:C2:91:FD:2D","sha256":"CA:67:F6:AD:4D:08:6A:13:9B:C6:0B:7B:BD:56:21:A6:C1:43:5A:F4:24:C7:FE:7F:A8:CB:BD:F0:5B:7C:FC:7F"}}},"request":{"raw":"GET /syn/js/index-c73607b8.js HTTP/1.1\r\nHost: base88.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://base88.cc/syn/js/index-login-6545034d.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:55:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 11 Jan 2026 19:37:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6963fbf1-5c7\"\r\nexpires: Thu, 15 Jan 2026 02:55:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JsFlx5pMAgBKt9Wu1ewJHgeEhgYa5sWoDZMdwgpggUrrXq8rsjOWLjIh%2FbIayIxtQEJXe5jFILsdPuNDYbEr3kJQYgH8j2k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bddf97f1c48b50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1479,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1478)","md5":"d241fdeecd062f67dd71a2ac8b4b4c9c","sha1":"7735f8670708f662a4b104aaa79541ed65715872","sha256":"d18fd3c8086d9981cbb21e1ecbc039310f2e4668100eb33339a8f8708d259afe","sha512":"21b4112c3fe663bd7da1a439bb7931eb4540d287255178793c6d86e0f2e20ca354c13c0077a2e2be9e465b8dea5c8a9283ebe576d3f59fe8a8d67162a3bdcdba","ssdeep":"","tlshash":"4231525678c8d63c7f87d18851798920e60c2b6edab033fdcbb92875d3ae1947024f22","first_seen":"2026-01-14T14:55:52.4119Z","last_seen":"2026-01-14T14:55:52.4119Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"base88.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T14:55:25.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base88.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:09:23 GMT","end":"Sat, 11 Apr 2026 21:08:12 GMT"},"fingerprint":{"sha1":"7D:95:5D:FA:AE:7B:1B:2B:31:CE:AF:C6:BF:C4:E5:03:C2:91:FD:2D","sha256":"CA:67:F6:AD:4D:08:6A:13:9B:C6:0B:7B:BD:56:21:A6:C1:43:5A:F4:24:C7:FE:7F:A8:CB:BD:F0:5B:7C:FC:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: base88.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 14:55:26 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 11 Jan 2026 21:26:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fha2SmKShIcexCfZKRe7gOVGxUFXlyMPYl1r3Xwu2Fead5fgMGsYdIdXhVhnBI0xR9QltMXAhGJ5LxC5Y7TyBAC3TxkniDw%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bddf969fafc7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"8f742a3cb4f44e1d8d95e5a21bb9c1fa","sha1":"42635ac18e3cbc71e95786447b2af67f0162902c","sha256":"ee34655d79291b208da2b2df18925c4995beeeb6a9665930ed6f6f85022637ff","sha512":"12bf8c1048c14bb92ba2f0035f0ca3360079a4f4e4c28f4a7efbaa040814dd2c74af47201d169e2d4d27f45d4d4035acda7939eca72f8df453bf5d350481be14","ssdeep":"","tlshash":"ce11d09a8297100a5512917c0be6720c23bbc45bd75acd043edd7158efc97d288f3b9c","first_seen":"2026-01-14T14:55:52.414124Z","last_seen":"2026-01-14T14:55:52.414124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":38,"dns":22,"connect":1,"send":0,"wait":511,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"base88.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/syn","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://base88.cc/","date":"2026-01-14T14:55:26.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base88.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:09:23 GMT","end":"Sat, 11 Apr 2026 21:08:12 GMT"},"fingerprint":{"sha1":"7D:95:5D:FA:AE:7B:1B:2B:31:CE:AF:C6:BF:C4:E5:03:C2:91:FD:2D","sha256":"CA:67:F6:AD:4D:08:6A:13:9B:C6:0B:7B:BD:56:21:A6:C1:43:5A:F4:24:C7:FE:7F:A8:CB:BD:F0:5B:7C:FC:7F"}}},"request":{"raw":"GET /syn HTTP/1.1\r\nHost: base88.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://base88.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:55:26 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlocation: https://base88.cc/syn/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bqbEvjNVlXQcIMKWrpfES%2FDarGKf1yNCa1BRbT%2Bmow4Xz6Qdp3zMSgbia2K1Nu3lK3D8D8G9fwvS%2BftFB6DiQ3HHJS6Npw0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bddf96e5ba2b50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2219,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"base88.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/syn/css/name-e93c29b3.css","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://base88.cc/syn/","date":"2026-01-14T14:55:26.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base88.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:09:23 GMT","end":"Sat, 11 Apr 2026 21:08:12 GMT"},"fingerprint":{"sha1":"7D:95:5D:FA:AE:7B:1B:2B:31:CE:AF:C6:BF:C4:E5:03:C2:91:FD:2D","sha256":"CA:67:F6:AD:4D:08:6A:13:9B:C6:0B:7B:BD:56:21:A6:C1:43:5A:F4:24:C7:FE:7F:A8:CB:BD:F0:5B:7C:FC:7F"}}},"request":{"raw":"GET /syn/css/name-e93c29b3.css HTTP/1.1\r\nHost: base88.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://base88.cc/syn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:55:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 11 Jan 2026 19:37:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6963fbf4-43850\"\r\nexpires: Thu, 15 Jan 2026 02:55:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXKiAVWfE0k6LiSfB2l5%2FE3ahx%2FaTVWWWuC2APKO%2FfH5XNwosFVq7zsvqdnEYaaIeI6UTnt8f2%2BHF4o5Cv4z%2F2uAR3QHFXA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bddf970abcab50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276560,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7ec3279e8fd0197456e681159a1e0c52","sha1":"5215159825fecd2bc8cd03890aa81125b4aef05b","sha256":"e93c29b320d8c0d4815d940e582a46bd24d219b5229da68c82a899e3416eabe7","sha512":"e3bad6bd96e61cd72ca289b7a21f5941cfdb4b3a5afad0f479993593699ba1a59f0eb08440603d624b8334b4de74c827048b127ef12959466af740efd5f458d6","ssdeep":"1536:GL2al1Af5aIzLIVcVehtN5J+jOkiHcplpVwwsgiOz4GMRnQMYJ6:lNshy5w9szrg","tlshash":"59449351aad0a07cbf57a1b6d7b7ead8b23cb510dd81e7a5f22052184acf7f4022351d","first_seen":"2026-01-11T06:58:03.34838Z","last_seen":"2026-03-20T20:34:53.380363Z","times_seen":4,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"base88.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/syn/js/index-login-6545034d.js","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://base88.cc/syn/","date":"2026-01-14T14:55:29.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base88.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:09:23 GMT","end":"Sat, 11 Apr 2026 21:08:12 GMT"},"fingerprint":{"sha1":"7D:95:5D:FA:AE:7B:1B:2B:31:CE:AF:C6:BF:C4:E5:03:C2:91:FD:2D","sha256":"CA:67:F6:AD:4D:08:6A:13:9B:C6:0B:7B:BD:56:21:A6:C1:43:5A:F4:24:C7:FE:7F:A8:CB:BD:F0:5B:7C:FC:7F"}}},"request":{"raw":"GET /syn/js/index-login-6545034d.js HTTP/1.1\r\nHost: base88.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://base88.cc/syn/js/index-27d62f06.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:55:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 11 Jan 2026 19:37:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6963fbf3-50f\"\r\nexpires: Thu, 15 Jan 2026 02:55:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZRtDAciADhxEcxcOssgzneb%2Fn%2B2J8WwoFyPDrjbjF0KXWmmEayp43X4royUTcYhO48BA7q1pGbnqRqnNRg2PQdLyEiTdXTU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bddf97f0c47b50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1295,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1294)","md5":"a9ce1c8784a681b1eb6eedd3c4770bad","sha1":"a6bb5abbd495378bca4244fe1364c9b993956a13","sha256":"4240f0981364ba3d86e198a5e29fd5467f1e245c35556f939519d00848b50fea","sha512":"f784001c3aa08bb7fd9c4242043ad2c8d0d969e057da053af8ce66e047188adf83e8cf5919b3e584bd6e7db7a955e206b21c1b8d22dfe1cdbbcad9d1e8eb68c8","ssdeep":"","tlshash":"7b21622c3428c23d958744dc756452a430fa7854f352c98eb53ca62a5b71db183bebac","first_seen":"2026-01-14T14:55:52.409163Z","last_seen":"2026-01-14T14:55:52.409163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"base88.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base88.cc/syn/png/name-5a5c4a7e.png","fqdn":"base88.cc","domain":"base88.cc","tld":"cc"},"ip":{"addr":"172.67.190.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://base88.cc/syn/","date":"2026-01-14T14:55:29.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base88.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:09:23 GMT","end":"Sat, 11 Apr 2026 21:08:12 GMT"},"fingerprint":{"sha1":"7D:95:5D:FA:AE:7B:1B:2B:31:CE:AF:C6:BF:C4:E5:03:C2:91:FD:2D","sha256":"CA:67:F6:AD:4D:08:6A:13:9B:C6:0B:7B:BD:56:21:A6:C1:43:5A:F4:24:C7:FE:7F:A8:CB:BD:F0:5B:7C:FC:7F"}}},"request":{"raw":"GET /syn/png/name-5a5c4a7e.png HTTP/1.1\r\nHost: base88.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://base88.cc/syn/css/name-4291f9c2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:55:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 11 Jan 2026 19:37:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6963fbf1-4ae00\"\r\nexpires: Fri, 13 Feb 2026 14:55:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BSuZMoJ42NmE8tyh4ShWzol8zBCt2TrKPmZy4vNF5clxYNPVLagXNI45KK6plr0YNCZJLdPQK0%2Ft4pKqWQjKBo76NBV5z1I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bddf97f5c4ab50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":306688,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 494 x 866, 8-bit/color RGBA, non-interlaced","md5":"9e417f3fe70a13746137afc179a240ad","sha1":"7799bed3d5eafcd154ea99fcbb005567194e21e5","sha256":"5a5c4a7e260349d3f9c1b31a2c2b113af209efee21dc4818489180c160c869ac","sha512":"c08b0235117389b58a93589e431aa0e117a2d279e8fbe0eab4c97188933ac749b71c8ab2f78910188565ed23c4519a3ff381628d8c8d0069ef5498d0e9a2723d","ssdeep":"6144:ZYHmoMY/QByW7fjKRB7UFJ8YS93dze7LCNOy9Ct2iC8fMjd677UUi:WHm+QByG86FeYcd6HCE15C8My7Bi","tlshash":"90642353f0eda1bf74b1cdbf58d1707983662d884aba326ead5ac04e36f1d791690c08","first_seen":"2026-01-14T14:55:52.41999Z","last_seen":"2026-01-14T14:55:52.41999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":534,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"base88.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
