{"report_id":"1424f2c9-b1ad-4538-bbed-2d9f91eacd3a","version":0,"status":"done","tags":[],"date":"2026-08-02T00:21:22Z","url":{"schema":"http","addr":"m.r2c4d.com","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":0,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"m.r2c4d.com/","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"title":"365英国上市(集团)有限公司-Official website","dom":{"size":369,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b6d8405382227853a3a5aebc316ad757","sha1":"1cb744a53d44425002c7f393660ff4adcc40ac47","sha256":"9d22bf270b031beafdb96d039415fec16b69cbe4952ca3b5468ac9ceefbccc00","sha512":"36c571b6892b57281a13b49740703fab70daf60cddb7fe27af72b67095b95b20c4586899e45d457014bd055eefa4f4be8b2a401ff8881e565b50fa5257975415","ssdeep":"","tlshash":"57e0c69f2c08851ae240ced4a0f2f80dc0e8ba66e498cc8de0e238dc59e83cc8901ac4","dom_hash":"domhash93825f6f8d6ace7c94109c2853ed4159","first_seen":"2026-08-02T00:21:31.220489Z","last_seen":"2026-08-02T03:07:28.918587Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m.r2c4d.com","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":0,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-06T00:21:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"fcl.xueyuxingfeng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"fcl.xueyuxingfeng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.bvjianceyi.cn","ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"domain_registered":"2018-05-04","domain_rank":0,"first_seen":"2026-08-02T00:21:22.376093Z","last_seen":"2026-08-02T00:21:22.376093Z","alert_count":0,"request_count":20,"received_data":5820,"sent_data":11292,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stopnote.vhostgo.com","ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"2009-02-05","domain_rank":5748949,"first_seen":"2012-07-21T20:37:54Z","last_seen":"2026-08-02T00:21:23.06981Z","alert_count":0,"request_count":40,"received_data":11500,"sent_data":18880,"comment":"","tags":null,"fingerprints":null},{"fqdn":"m.r2c4d.com","ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"domain_registered":"2026-05-02","domain_rank":0,"first_seen":"2026-08-02T00:21:22.378109Z","last_seen":"2026-08-02T00:21:22.378109Z","alert_count":66,"request_count":33,"received_data":374260,"sent_data":13694,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fcl.xueyuxingfeng.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-06-17","domain_rank":0,"first_seen":"2021-06-17T13:30:21Z","last_seen":"2026-08-01T07:35:38.692487Z","alert_count":2,"request_count":1,"received_data":0,"sent_data":463,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"m.r2c4d.com/jquery.min.js","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c8dd2586a768033083dc8624348a493","sha1":"e8e753c8322aa58d639b0b234b8899db8fa8f06b","sha256":"37193ec17dc02e31ccf1fdf1bea1ef6ed3f6824bf08a0aaa100c9d0cdcf15bf6","sha512":"c098b7c42e55b9ac8825313efac9f6a86fa610bf552f034c4ad1ad87f65f97125de6b9c2c2ce4ff9b61e984c58cb8815327f349773f9aa5893abf88739e78247","ssdeep":"","tlshash":"ac011ddc97c8d85f6fcd5d83fa14deca21b3813b97d972838318fa8d15a9152c49c449","size":710,"data":"","first_seen":"2023-09-27T16:28:20Z","last_seen":"2026-08-03T00:19:16.206603Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.bvjianceyi.cn/uploads/allimg/20220302/1-220302163431Q5.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.792Z","timestamp":1785630057792,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /uploads/allimg/20220302/1-220302163431Q5.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1933,"timings":{"blocked":1698,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/uploads/allimg/20220302/1-22030216343B01.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.805Z","timestamp":1785630057805,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /uploads/allimg/20220302/1-22030216343B01.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1964,"timings":{"blocked":1722,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:59.679Z","timestamp":1785630059679,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1585,"timings":{"blocked":1365,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.504Z","timestamp":1785630061504,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=OOJAJGEDOOBFLBDDICOIJJEP; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/uploads/allimg/20231214/1-23121416243Qc.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.109Z","timestamp":1785630057109,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/allimg/20231214/1-23121416243Qc.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/uploads/allimg/20231214/1-23121416243Qc.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":714,"timings":{"blocked":559,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/uploads/allimg/20231214/1-231214152954S4.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.110Z","timestamp":1785630057110,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/allimg/20231214/1-231214152954S4.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/uploads/allimg/20231214/1-231214152954S4.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":514,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/uploads/allimg/20231214/1-231214163922434.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.112Z","timestamp":1785630057112,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/allimg/20231214/1-231214163922434.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/uploads/allimg/20231214/1-231214163922434.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":819,"timings":{"blocked":662,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/images/beiantubiao.png","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.126Z","timestamp":1785630057126,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/beiantubiao.png HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/images/beiantubiao.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":402,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/uploads/allimg/20240709/1-240F9162021G6.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:58.000Z","timestamp":1785630058000,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /uploads/allimg/20240709/1-240F9162021G6.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":2014,"timings":{"blocked":1770,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/template/pc/skin/images/ys4.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:58.095Z","timestamp":1785630058095,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /template/pc/skin/images/ys4.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":2107,"timings":{"blocked":1865,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:59.775Z","timestamp":1785630059775,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1562,"timings":{"blocked":1318,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/css/common.css","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.075Z","timestamp":1785630057075,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/css/common.css HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/css;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7484,"size_decoded":2164,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ce0a509282c52957291393fdb9694ecd","sha1":"a26ef6e04794d144479ac2e603a3ac723f09c0b6","sha256":"078912503b9e8254bb6c10b44ba7d9bc66981ba8377513cd9052d7bc9aa039d4","sha512":"9aeb36a17d320050ddb142133367523db9ac66501c3bb421e24283a42a01bf18f92e6daa6df5ef5ce6c140cba515b54b1a43746b7e2d3d8be554ea92813cab18","ssdeep":"48:avRFfxVlE/wcQfSM3AGQ5r3O71pIND9q0iE1pci3cotdya4+o9r9kmVBVcv3DPma:aZHbSJ5rwINFiYcZLSzAfhjNpDkz","tlshash":"e0f1427632442c8ca017a1bd6f84d756271f4213fe4eeef9f866ba3882465850473b5e","first_seen":"2026-08-02T00:21:31.229664Z","last_seen":"2026-08-02T03:07:28.922591Z","times_seen":4,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":129,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/images/logo.png","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.100Z","timestamp":1785630057100,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/images/logo.png HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/template/pc/skin/images/logo.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":502,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/uploads/allimg/20230627/1-23062G14S0194.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.122Z","timestamp":1785630057122,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/allimg/20230627/1-23062G14S0194.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/uploads/allimg/20230627/1-23062G14S0194.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":353,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/uploads/allimg/20250519/1-250519104056437.gif","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.124Z","timestamp":1785630057124,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/allimg/20250519/1-250519104056437.gif HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/uploads/allimg/20250519/1-250519104056437.gif\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":353,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.321Z","timestamp":1785630061321,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=HNJAJGEDKEIFHPIEHJMAMBDA; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/jquery.min.js","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.034Z","timestamp":1785630057034,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /jquery.min.js HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 710\r\nLast-Modified: Tue, 05 May 2026 07:49:42 GMT\r\nConnection: keep-alive\r\nETag: \"69f9a116-2c6\"\r\nExpires: Sun, 02 Aug 2026 01:20:57 GMT\r\nCache-Control: max-age=3600\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":710,"size_decoded":1023,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (710), with no line terminators","md5":"8c8dd2586a768033083dc8624348a493","sha1":"e8e753c8322aa58d639b0b234b8899db8fa8f06b","sha256":"37193ec17dc02e31ccf1fdf1bea1ef6ed3f6824bf08a0aaa100c9d0cdcf15bf6","sha512":"c098b7c42e55b9ac8825313efac9f6a86fa610bf552f034c4ad1ad87f65f97125de6b9c2c2ce4ff9b61e984c58cb8815327f349773f9aa5893abf88739e78247","ssdeep":"","tlshash":"ac011ddc97c8d85f6fcd5d83fa14deca21b3813b97d972838318fa8d15a9152c49c449","first_seen":"2023-09-27T16:28:20Z","last_seen":"2026-08-03T00:19:16.206603Z","times_seen":229,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/uploads/allimg/20250519/1-250519104056437.gif","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.651Z","timestamp":1785630057651,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /uploads/allimg/20250519/1-250519104056437.gif HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:20:59 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1862,"timings":{"blocked":-1,"dns":888,"connect":231,"send":0,"wait":233,"receive":0,"ssl":509},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/uploads/allimg/20230816/1-230Q6112104N3.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.653Z","timestamp":1785630057653,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /uploads/allimg/20230816/1-230Q6112104N3.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:20:59 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1874,"timings":{"blocked":-1,"dns":887,"connect":239,"send":0,"wait":243,"receive":0,"ssl":506},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:59.752Z","timestamp":1785630059752,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1565,"timings":{"blocked":1328,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/css/style.css","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.038Z","timestamp":1785630057038,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/css/style.css HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/css;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47271,"size_decoded":9961,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6c40aad449de1bf9a91853ce464c4e5b","sha1":"741c441a9ca8619f6d6fda2f94d7c80d53ec08aa","sha256":"f362a35830c9cedf6b9c6e7a42cc482f47cd336c00c48b9d2d8fc037ae336ceb","sha512":"d6fff8d18503fea5c6411e90ea0619e7328b0a6ee87ed2d2652349b5b9754f7c01cdd6a8e6722cb451b466f8e23bf09a85bc8e814f786445cfecf73cd243f868","ssdeep":"384:UIG6Xs2HHvCct0ncWVzVz2aXeDwL9N3hUcWvntPxMfvA+hhNZvQ:/G6RgcWVzEaXecN3hUcWvnr","tlshash":"b823312b6b613949f427e2bcfd903b055b1f8083bf0e1d6bb995bc6d828d484297364d","first_seen":"2026-08-02T00:21:31.232414Z","last_seen":"2026-08-02T03:07:28.921996Z","times_seen":4,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":131,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/uploads/allimg/20240709/1-240F9162021G6.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.120Z","timestamp":1785630057120,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/allimg/20240709/1-240F9162021G6.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/uploads/allimg/20240709/1-240F9162021G6.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":869,"timings":{"blocked":714,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:00.000Z","timestamp":1785630060000,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1513,"timings":{"blocked":1286,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-02T00:20:56.635Z","timestamp":1785630056635,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:56 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":36929,"size_decoded":10417,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (549)","md5":"21493fdd7295effa53403ddc517bd42e","sha1":"e64fffcc74096de2d0c1bef94e913dea8c19b29a","sha256":"834215b0f6942ea28151c7c62840434a5980da9cd4b5e50181dbdc011daaaad7","sha512":"821164211effdfce2f1dff594433e1c24b9da0fbedb9d82ba4b2c18e49de4c29d3c534a7960e8d6b9b5750e4ea97e4c099057b9f0b333daa9a384ba0c0216928","ssdeep":"768:WEKoG22NAP3tx7UWJaIAWdunJpHX61S/XigZOWbjizAThpd:WE34ur7UWJavWknJdx/XigZOWXizAThz","tlshash":"69f2b41c5054d923066211d5fad3472e109997a9ecc288d3f7eca3e94ff8dae4e1b389","first_seen":"2026-08-02T00:21:31.234254Z","last_seen":"2026-08-02T03:07:28.93971Z","times_seen":4,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":9,"connect":131,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/js/common.js","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.081Z","timestamp":1785630057081,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/js/common.js HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":305,"size_decoded":406,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"d38dc6a6db97fd27588f83627be11e71","sha1":"7fc05f64bb0447c6c631bbb6796a142d269bbf8e","sha256":"d0659de955362c0065f944127f16248db7e63e8b3dffc886dd188d50cc1d39f9","sha512":"2ef276dd850c383de027c0a99e13a5d2c136596c27b0e5282928a46fc7a155865ae70d42d29fed79c08dbd463c9afc9dff377bbafe11308e7c26ff60a331a215","ssdeep":"","tlshash":"c0e0cdb6fa95ce7367711108cc99e70c085095f3bb589c4cf08c8d5d7c5cc2a413b454","first_seen":"2023-12-14T10:15:11Z","last_seen":"2026-08-02T03:07:28.939013Z","times_seen":5,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":213,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/template/pc/skin/images/about.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.650Z","timestamp":1785630057650,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /template/pc/skin/images/about.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:20:59 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1877,"timings":{"blocked":-1,"dns":889,"connect":240,"send":0,"wait":244,"receive":0,"ssl":504},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:59.533Z","timestamp":1785630059533,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1564,"timings":{"blocked":-1,"dns":1073,"connect":246,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:59.777Z","timestamp":1785630059777,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1565,"timings":{"blocked":1320,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:00.017Z","timestamp":1785630060017,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1570,"timings":{"blocked":1322,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.063Z","timestamp":1785630061063,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=ILJAJGEDAOMLBHDHEKCLDMMO; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.559Z","timestamp":1785630061559,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=PPJAJGEDBIPLMOHFBOOLEHDL; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/js/jquery.js","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.077Z","timestamp":1785630057077,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/js/jquery.js HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":96298,"size_decoded":37756,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32341)","md5":"e20fb66dd0a4c9a1397b7498194e87a0","sha1":"d682a75edd8aa7dc0dfc8183dd3b58f97fbccb04","sha256":"8bed1817a693a0447277bf0760625ccb52b487e0f9ab940ed92c15be027383f9","sha512":"0c0cf51ba3956acaa2887e47aec57a3fdb13dc39af4fd7c7517782a6c7f28ac8175fb67f404ccaddc8ffb6d9bf59ef8a751d5a47a1586b359950b059fb2028ce","ssdeep":"1536:nPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5YH:eIO/e2D5c4LgtIGLja98HrK","tlshash":"2e93e8d9b6d2706287b730a851bf510bb17698eab80c4c60f158d8e47eb4e8d507bf2d","first_seen":"2023-03-13T02:33:14Z","last_seen":"2026-08-03T03:01:16.247326Z","times_seen":112,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":140,"send":0,"wait":144,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/js/aos.js","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.090Z","timestamp":1785630057090,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/js/aos.js HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17277,"size_decoded":6447,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17243)","md5":"655a08fb7dbbfea98c0fddece4a7daa5","sha1":"d467e103bd39f235f9093de1678013659750081d","sha256":"890ae90ffedb7b106e6559d5bd65ee1af7854488934c06df96493fcb000f3cb4","sha512":"0948f7bbdb5fa6a974d6f76b4ec466e1e6b404a7e1c1ac0f3f7b67d2d8aa662e62f5e85d7057fdc6275a1044f932afc8aaedbaccbeb5561d1371c455c69b16fe","ssdeep":"192:720O75kPT83Ri6bDLFvugSpjGzZIYLqnPGoEslT5rsbdG9/hnmyepOIWtlomlKp/:72N2wXFGbUu8gEI5rEdyhar1xZvGG1","tlshash":"1772f7dcb245f07a27e3b266c16f610ff6f0a464a44f8490c2a9e4d67e7425d8233d6d","first_seen":"2024-08-19T15:36:04.516414Z","last_seen":"2026-08-02T03:07:28.941005Z","times_seen":9,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":195,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/images/ys3.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.117Z","timestamp":1785630057117,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/images/ys3.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/template/pc/skin/images/ys3.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":821,"timings":{"blocked":667,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/template/pc/skin/images/erweima.png","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.931Z","timestamp":1785630057931,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /template/pc/skin/images/erweima.png HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1965,"timings":{"blocked":1743,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:59.512Z","timestamp":1785630059512,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1541,"timings":{"blocked":0,"dns":1094,"connect":224,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:59.518Z","timestamp":1785630059518,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1563,"timings":{"blocked":0,"dns":1088,"connect":238,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.103Z","timestamp":1785630061103,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2567\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=KLJAJGEDEKIAKEMILJEJKJLJ; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/images/ys1.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.115Z","timestamp":1785630057115,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/images/ys1.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/template/pc/skin/images/ys1.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":820,"timings":{"blocked":672,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/template/pc/skin/images/ys2.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.955Z","timestamp":1785630057955,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /template/pc/skin/images/ys2.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":2045,"timings":{"blocked":1793,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/images/erweima.png","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.113Z","timestamp":1785630057113,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/images/erweima.png HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/template/pc/skin/images/erweima.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":801,"timings":{"blocked":654,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/images/ys4.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.119Z","timestamp":1785630057119,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/images/ys4.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:58 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/template/pc/skin/images/ys4.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":964,"timings":{"blocked":819,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/uploads/allimg/20240723/1-240H3164133619.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.120Z","timestamp":1785630057120,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/allimg/20240723/1-240H3164133619.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:58 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/uploads/allimg/20240723/1-240H3164133619.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":948,"timings":{"blocked":801,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:59.900Z","timestamp":1785630059900,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1584,"timings":{"blocked":1365,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.280Z","timestamp":1785630061280,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=LMJAJGEDNIDNGDKDNMBHJIFF; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.346Z","timestamp":1785630061346,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=MNJAJGEDEHFOBLPPLIFMFEHH; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.595Z","timestamp":1785630061595,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=DAKAJGEDJEMCELIBENPLKBPD; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/uploads/allimg/20220302/1-2203021A125946.png","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.125Z","timestamp":1785630057125,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/allimg/20220302/1-2203021A125946.png HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/uploads/allimg/20220302/1-2203021A125946.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":353,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/template/pc/skin/images/ys1.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.954Z","timestamp":1785630057954,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /template/pc/skin/images/ys1.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":2041,"timings":{"blocked":1791,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/template/pc/skin/images/ys3.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.957Z","timestamp":1785630057957,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /template/pc/skin/images/ys3.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":2056,"timings":{"blocked":1814,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/uploads/allimg/20240723/1-240H3164133619.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:58.079Z","timestamp":1785630058079,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /uploads/allimg/20240723/1-240H3164133619.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":2038,"timings":{"blocked":1818,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.048Z","timestamp":1785630061048,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=EAKAJGEDALKOEKADGGMJFOIJ; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.517Z","timestamp":1785630061517,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=POJAJGEDHGAFAGJOMGBFHPDM; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.594Z","timestamp":1785630061594,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2567\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=AAKAJGEDPBFPEOAPEBDGEKFG; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/uploads/allimg/20220302/1-220302163431Q5.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.104Z","timestamp":1785630057104,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/allimg/20220302/1-220302163431Q5.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/uploads/allimg/20220302/1-220302163431Q5.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":514,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/uploads/allimg/20230627/1-23062G14S0194.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.633Z","timestamp":1785630057633,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /uploads/allimg/20230627/1-23062G14S0194.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:20:59 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1875,"timings":{"blocked":0,"dns":906,"connect":233,"send":0,"wait":235,"receive":0,"ssl":501},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/uploads/allimg/20231214/1-231214163922434.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.952Z","timestamp":1785630057952,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /uploads/allimg/20231214/1-231214163922434.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":2008,"timings":{"blocked":1773,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:00.121Z","timestamp":1785630060121,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1582,"timings":{"blocked":1363,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.057Z","timestamp":1785630061057,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2565\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=IAKAJGEDBNEJEIKJAKBDFHGC; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.r2c4d.com/","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-02T00:20:56.486Z","timestamp":1785630056486,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/css/style1.css","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.039Z","timestamp":1785630057039,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/css/style1.css HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/css;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86880,"size_decoded":17946,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (362)","md5":"d9c53e1338de8680e0eeff4f7e7e038d","sha1":"3809e32dee6890a6bdc8aade38f2bc4e16bbe5ae","sha256":"cb1ee9840d9665953167620b2c9bed40d90253b1e59306040ba93052ffffa037","sha512":"860423b1a1495780b54c75e06eddbbcbba279f1dfdabe74536a37210703ee99f20948794db3409a4d2c521750ebbb5409c0af6baf22aada079ea559029b768ae","ssdeep":"1536:IQqjucNsv1R15Sb9is6xdVMZHFWRp96d6gTtyoi7Dd0bFB+LPdQ7RZqLr0b3ax9q:IQqjucNsv1R1506MoYLnOst/ftXrPy9i","tlshash":"e083522b1b202d84e517a2edaf991b556f2f9003ff1e1daab2a57c6cc38d0c4517364e","first_seen":"2026-08-02T00:21:31.24042Z","last_seen":"2026-08-02T03:07:28.921359Z","times_seen":4,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":130,"send":0,"wait":148,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/uploads/allimg/20230816/1-230Q6112104N3.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.121Z","timestamp":1785630057121,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/allimg/20230816/1-230Q6112104N3.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/uploads/allimg/20230816/1-230Q6112104N3.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":353,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/images/beiantubiao.png","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.689Z","timestamp":1785630057689,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /images/beiantubiao.png HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:20:59 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1801,"timings":{"blocked":0,"dns":851,"connect":230,"send":0,"wait":233,"receive":0,"ssl":486},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:59.460Z","timestamp":1785630059460,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1599,"timings":{"blocked":0,"dns":1146,"connect":227,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.084Z","timestamp":1785630061084,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2567\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=LLJAJGEDAJMHAMBPHHHPJEAK; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.290Z","timestamp":1785630061290,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=MMJAJGEDNNNCKIFOKKFJINOA; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.708Z","timestamp":1785630061708,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:03 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=ABKAJGEDKHENPEJDBLJFDKCJ; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/uploads/allimg/20220302/1-2203021634163R.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.102Z","timestamp":1785630057102,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/allimg/20220302/1-2203021634163R.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/uploads/allimg/20220302/1-2203021634163R.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":512,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/images/about.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.123Z","timestamp":1785630057123,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/images/about.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/template/pc/skin/images/about.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":353,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fcl.xueyuxingfeng.com:6987/067/l/sj.js","fqdn":"fcl.xueyuxingfeng.com","domain":"xueyuxingfeng.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.379Z","timestamp":1785630057379,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /067/l/sj.js HTTP/1.1\r\nHost: fcl.xueyuxingfeng.com:6987\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"fcl.xueyuxingfeng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"fcl.xueyuxingfeng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/uploads/allimg/20220302/1-2203021634163R.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.798Z","timestamp":1785630057798,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /uploads/allimg/20220302/1-2203021634163R.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1948,"timings":{"blocked":1711,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.728Z","timestamp":1785630061728,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:03 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=BBKAJGEDJDEEOFDHHGDBJGOP; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:59.534Z","timestamp":1785630059534,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1509,"timings":{"blocked":0,"dns":1071,"connect":219,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:00.206Z","timestamp":1785630060206,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1517,"timings":{"blocked":1294,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.269Z","timestamp":1785630061269,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=JMJAJGEDKJLIHDKJMCNCNFLB; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.488Z","timestamp":1785630061488,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=IOJAJGEDPCJBENCEEOBDNIFF; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/js/app.js","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.092Z","timestamp":1785630057092,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/js/app.js HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11247,"size_decoded":3727,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"edd1efe29db553425ad09a2a99df9cef","sha1":"fba849c121255a2abef5c665fcef77950f201e56","sha256":"157e465e8042686cf199415a006fd53d61a6eafa548343e58d9c12a6a730fa4c","sha512":"ccec20d4c76f0df22f7b87a9c398c86add7bd1ffacb5e4fe98bed80ab10f404099feceac8fe4b9f425a3d49fbeef69fab8a98bd8c714a57703205b7eaad60385","ssdeep":"192:nPNjy1m2sUUru6EHV1RMRMj+iTwiC9TMywVzcilqwlFc6U6b:nPHPub1RMRMWAqwlP","tlshash":"4432310af6ba16b4247b307a0b6f500835761527aa06cc14fd2c26b94fd4f2c56fafd9","first_seen":"2026-05-11T23:33:09.873525Z","last_seen":"2026-08-02T03:07:28.941499Z","times_seen":5,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":248,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/images/ys2.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.116Z","timestamp":1785630057116,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/images/ys2.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/template/pc/skin/images/ys2.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":820,"timings":{"blocked":672,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/uploads/allimg/20220302/1-2203021A125946.png","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.645Z","timestamp":1785630057645,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /uploads/allimg/20220302/1-2203021A125946.png HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:20:59 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1809,"timings":{"blocked":-1,"dns":895,"connect":216,"send":0,"wait":222,"receive":0,"ssl":475},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/uploads/allimg/20231214/1-23121416243Qc.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.845Z","timestamp":1785630057845,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /uploads/allimg/20231214/1-23121416243Qc.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1925,"timings":{"blocked":1683,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:59.494Z","timestamp":1785630059494,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1600,"timings":{"blocked":0,"dns":1111,"connect":245,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:59.729Z","timestamp":1785630059729,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1547,"timings":{"blocked":1324,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:59.749Z","timestamp":1785630059749,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1537,"timings":{"blocked":1310,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:59.964Z","timestamp":1785630059964,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1536,"timings":{"blocked":1313,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/css/aos.css","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.036Z","timestamp":1785630057036,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/css/aos.css HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/css;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":33671,"size_decoded":3778,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f24666a8054d164f8b03d4b5c2d2a4a2","sha1":"b7542e6c12731bd67888c4fd6c44594777bfeb5b","sha256":"fed87167a9e1008eaf81d81ca50ec00a9678f62e0a681bd81f50eaa268a2ebfe","sha512":"e2308920416196d26185672db564a00090a360da96569cb761b698ab2b2ff040ae62c27ee5757bb2ec5442d8117cae300d43487ad04b3226a496a8d17ed16c94","ssdeep":"768:xApK1apm4jpkcLpMrwpKV6pSqdpoaVp09ipyjkpO0Pp0o/pEn0p6xepCW5pgWJpX:+pK1apm4jpkcLpMrwpKV6pSqdpoaVp0E","tlshash":"d4e26e997b0d654887634b1543cf2818ca3dfa567a28dc19f73c3c0a5a0ad18b277fb6","first_seen":"2025-01-05T19:52:02.175942Z","last_seen":"2026-08-02T03:07:28.923202Z","times_seen":26,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":131,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/js/jquery.superslide.2.1.1.js","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.079Z","timestamp":1785630057079,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/js/jquery.superslide.2.1.1.js HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11408,"size_decoded":4188,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855)","md5":"fd7557b79ce6261f027b3f360ca5fa78","sha1":"e2975accbbfbb6daf9f4b6f0a48c93b6aa043407","sha256":"3400defd7bd2f094fbbe42a2449fa23bf573516631e76cc7451da186d14a1e4a","sha512":"bc4039a57e81723589878c4469b38f185ca857531d0844be6f2db746b276decd2e9d4869ac24af69f03bf5307289c5bb76192ade9929c529808fae6a1fa65718","ssdeep":"192:BEK3b+H+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:BDznqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"c532c75fb66635ce4597b3f1107f940d222b5965fc8a8ca0b17482c0adb9a1c243bfed","first_seen":"2023-04-05T04:17:49Z","last_seen":"2026-08-02T14:49:42.908563Z","times_seen":2429,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/uploads/allimg/20220302/1-22030216343B01.jpg","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.106Z","timestamp":1785630057106,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/allimg/20220302/1-22030216343B01.jpg HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.bvjianceyi.cn/uploads/allimg/20220302/1-22030216343B01.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":672,"timings":{"blocked":514,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/uploads/allimg/20231214/1-231214152954S4.jpg","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.804Z","timestamp":1785630057804,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /uploads/allimg/20231214/1-231214152954S4.jpg HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1942,"timings":{"blocked":1709,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:00.003Z","timestamp":1785630060003,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1551,"timings":{"blocked":1314,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:00.019Z","timestamp":1785630060019,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1569,"timings":{"blocked":1324,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.099Z","timestamp":1785630061099,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=MPJAJGEDNDHHHDIEBPIJFFCH; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stopnote.vhostgo.com/?www.bvjianceyi.cn","fqdn":"stopnote.vhostgo.com","domain":"vhostgo.com","tld":"com"},"ip":{"addr":"222.210.34.248","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:21:01.343Z","timestamp":1785630061343,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vhostgo.com","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:5E:FF:72:9D:87:3B:A0:CB:5C:21:0F:62:6B:D8:04:08:C5:25:3D","sha256":"B6:EA:15:4B:45:50:6F:86:A3:98:92:8F:CF:07:45:09:83:90:9E:59:7B:88:6B:4B:A2:4E:68:26:44:BD:B7:62"}}},"request":{"raw":"GET /?www.bvjianceyi.cn HTTP/1.1\r\nHost: stopnote.vhostgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: wts\r\nDate: Sun, 02 Aug 2026 00:21:02 GMT\r\nContent-Type: text/html; Charset=utf-8\r\nContent-Length: 2568\r\nConnection: keep-alive\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ASPSESSIONIDSSCRQSTB=LNJAJGEDIFFPGLGBPOKOGBOD; path=/\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.r2c4d.com/template/pc/skin/js/jquery.validator.js","fqdn":"m.r2c4d.com","domain":"r2c4d.com","tld":"com"},"ip":{"addr":"107.158.71.218","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.087Z","timestamp":1785630057087,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/pc/skin/js/jquery.validator.js HTTP/1.1\r\nHost: m.r2c4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://m.r2c4d.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:20:57 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":16496,"size_decoded":7693,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16376)","md5":"9940bc9dd6621b4c1420fd6b56915b60","sha1":"6bb01631c045a6d2f3066c67542d75f285b1d013","sha256":"12ac2d52afabc1478604ad4220983f8bb581b2f9fa3665870a9aa62e046f0329","sha512":"3aae12f0f632e3cf4ee6e2bc7bbff6b3f40b128a24ab7c4d896926bb17c3b6fc4e0d0f438c186e1939bab6ed4d9f83f188b1555d9ebfd0c95e32cbc0127ee7ed","ssdeep":"384:Zq1bv9cqyNV/FeMddLW4eyp9jAyiaS+aUpdRTdy7Po8veULxnK:g1O/F7djp9jAey7Po822k","tlshash":"3872eacd76d2b2820e6360f1545f6007a2bf6a69340e5210f56ae4f2be78d5d9323e78","first_seen":"2026-08-02T00:21:31.250802Z","last_seen":"2026-08-02T03:07:28.920651Z","times_seen":4,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":190,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"m.r2c4d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bvjianceyi.cn/template/pc/skin/images/logo.png","fqdn":"www.bvjianceyi.cn","domain":"bvjianceyi.cn","tld":"cn"},"ip":{"addr":"211.149.225.81","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://m.r2c4d.com/","date":"2026-08-02T00:20:57.786Z","timestamp":1785630057786,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bvjianceyi.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:81:03:31:9E:E9:36:40:60:97:D7:1F:00:44:FB:21:3C:8D:C5:87","sha256":"9D:5A:68:99:0C:F1:0C:7E:57:43:38:F4:04:ED:5F:14:08:B8:2C:41:D4:C5:0B:05:CB:3B:E0:D6:9A:9D:B7:BF"}}},"request":{"raw":"GET /template/pc/skin/images/logo.png HTTP/1.1\r\nHost: www.bvjianceyi.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://m.r2c4d.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 00:21:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: http://stopnote.vhostgo.com/?www.bvjianceyi.cn\r\nServer: wts\r\nContent-Security-Policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T11:04:27.792431Z","times_seen":17688879,"resource_available":true,"data":null}},"time_used":1888,"timings":{"blocked":1668,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}