{"report_id":"160d9ffa-6f2d-4902-a77d-97cec65a09e4","version":0,"status":"done","tags":[],"date":"2026-07-22T17:57:13Z","url":{"schema":"http","addr":"laoshuka.com","fqdn":"laoshuka.com","domain":"laoshuka.com","tld":"com"},"ip":{"addr":"172.65.235.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/?channel=mp2ga3","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"title":"主页","dom":{"size":65135,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (37891)","md5":"4fcadca6551ec7a341a2ff5d99ae1179","sha1":"2554c4e5d8c15c93cc11ceb31ce1b315939a58bd","sha256":"22410fb16539adc0d8051f2e4f1c02b4c1c064b866355898280c16dd682cbfe5","sha512":"5edbec4864a00c4c227356018b35594a2ae457be686ceb57455f79f34aaff03dfe64f3f03619e3eb7fd2c4bf779d606bd13b16fd97e7b157204a796377ee5994","ssdeep":"1536:hnXOSeyophJTlmPoTQToTcMyEp//XFHFVThPTr2TvSgYltBpM:hnXOSeyWLlA6S6Nbp/PFHFJJcvSgYlz+","tlshash":"aa53d73a4f639976003b51ed3631930e26f8faecb4f9885068a63d459bf5c70e86d385","dom_hash":"domhash576159817d5401ed3a51400b1f80215d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"laoshuka.com","fqdn":"laoshuka.com","domain":"laoshuka.com","tld":"com"},"ip":{"addr":"172.65.235.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T17:57:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www15.jz5ul.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www24.0efgm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"cpi.landp2jdbpf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"cpich.landp2jdbpf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"cpiv4.landp2jdbpf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"32z.ccgzflsmelqphqqqqjeryytevh.com","ip":{"addr":"57.180.242.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2026-06-20","domain_rank":0,"first_seen":"2026-07-20T23:30:23.533608Z","last_seen":"2026-07-20T23:30:23.533608Z","alert_count":0,"request_count":2,"received_data":1191,"sent_data":1048,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn-res-44.e14gm.com","ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-06-30","domain_rank":0,"first_seen":"2026-07-22T17:57:14.111607Z","last_seen":"2026-07-22T17:57:14.111607Z","alert_count":0,"request_count":15,"received_data":740997,"sent_data":7452,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"laoshuka.com","ip":{"addr":"172.65.235.97","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-14","domain_rank":0,"first_seen":"2026-07-22T17:57:13.472078Z","last_seen":"2026-07-22T17:57:13.472078Z","alert_count":0,"request_count":4,"received_data":724,"sent_data":1868,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cpiv4.landp2jdbpf.com","ip":{"addr":"3.33.216.133","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-07-02","domain_rank":0,"first_seen":"2026-07-05T02:52:47.115927Z","last_seen":"2026-07-20T23:30:25.99218Z","alert_count":2,"request_count":2,"received_data":2570,"sent_data":1215,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www15.jz5ul.com","ip":{"addr":"108.157.229.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-05-30","domain_rank":0,"first_seen":"2026-07-22T05:39:23.830678Z","last_seen":"2026-07-22T05:39:23.830678Z","alert_count":1,"request_count":1,"received_data":3430,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www24.0efgm.com","ip":{"addr":"13.249.8.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-06-16","domain_rank":0,"first_seen":"2026-07-22T05:39:23.82859Z","last_seen":"2026-07-22T05:39:23.828591Z","alert_count":1,"request_count":1,"received_data":3430,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"cpi.landp2jdbpf.com","ip":{"addr":"3.33.216.133","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-07-02","domain_rank":0,"first_seen":"2026-07-05T02:52:47.117152Z","last_seen":"2026-07-20T23:30:24.318709Z","alert_count":2,"request_count":2,"received_data":2570,"sent_data":1211,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cpich.landp2jdbpf.com","ip":{"addr":"3.33.216.133","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-07-02","domain_rank":0,"first_seen":"2026-07-05T02:52:47.118072Z","last_seen":"2026-07-20T23:30:25.483981Z","alert_count":2,"request_count":2,"received_data":662,"sent_data":1226,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www24.3z86k.com","ip":{"addr":"13.249.8.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-06-16","domain_rank":0,"first_seen":"2026-07-21T23:33:37.415991Z","last_seen":"2026-07-21T23:33:37.415991Z","alert_count":0,"request_count":1,"received_data":3430,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/main-DaNSoxT0.js","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"97ab720554c0564b0fd2698571afdd5f","sha1":"9cc5683dacb5e209011dab69708e2c581b73d46b","sha256":"0aceebc7e11b7dee403aea05a33af519804376ee9b50dcad89a9061650260222","sha512":"d4e07c3160c0e397f8691a8c8c36b6ec4e839a8dfe18487edafc7998378fcf97e6fbee71ea793c4521ae8279808e2a9b624bff6b32e28432fc615ca696eeba84","ssdeep":"3072:fpXQw8gOq6+/+oT5kDmOL7UleDtRC5YC5:fRQl5qt5mYlWtRC5YC5","tlshash":"60d34af87182b63513ea19e180b70006b73d1d65784994e4b0adeccf3e7a49550abfbe","size":134530,"data":"","first_seen":"2026-07-22T05:39:32.911592Z","last_seen":"2026-07-22T17:57:19.76976Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/?channel=mp2ga3","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"242a0b71d711a52849cc31058a969fc0","sha1":"bf60f71bc0a50ea4bd7d04ea34855ccde36b071f","sha256":"853bf0cd83b31e85ced36fbc4228f5fa5a142dca074dc8dab6c8790cc75727a5","sha512":"92ca5db1f501bad3186ae93d599ab761b347274295534a4d3d65bff534c50c428057286668939b5ed00c204eb3d9cfe922e4fb5001197b955d9bd36a6a45485c","ssdeep":"","tlshash":"a370000c8020cc8800ae0230000a28e8b280000200bc00c0000080c882038c8c803002","size":23,"data":"","first_seen":"2026-03-30T21:13:35.354544Z","last_seen":"2026-07-22T17:57:19.777726Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/WebMain-Do7eQ-TR.js","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f34f7503c0013c42c3fc8aa5817ec5f","sha1":"82934026a176321395d2ca9f371502c3e90272a1","sha256":"e7d56ad5cba7b150579b2f6d635ea2e72d87cdfe809cf9504b17220af56854f5","sha512":"796c1ea7aa01b7ce8dca7e0c5068099c1c3dc0c0a87f0ca6e4ecf8b04ec872d72d81bbb3cb3af69d7f95f3b5976f3a595f2c46b06ecc086204ae3234297c1241","ssdeep":"192:1Mk10/gxnuJ3KrnKp0WOrw9Uepcj0wNUn+SK1Mi5phj6aJCrv:1MkAgxuJkdVSKVpyrv","tlshash":"5ef12bc5a017cf7cc2a7966020227452ee8dafd9c0e8ed56a0f85d1938c14f0dea527c","size":7943,"data":"","first_seen":"2026-07-22T05:39:32.900834Z","last_seen":"2026-07-22T17:57:19.759521Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/QrCode.vue_vue_type_script_setup_true_lang-BIjQtLwD.js","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d2ec58c8114af2dd0de61de9ae1c879","sha1":"c2c6203e74dc596dcdecdbf87c2c903e07ca11dd","sha256":"a5540d8e991abc342773252e373be2ea6aae30d5ff2661330881f237a5d3e4bf","sha512":"01963e4879b775e649c8aa0a2142dbb48afe24f169628e05aaf6636c782e1dbbdabe7b9fe35187d1b5741658ec98fd62635a97cd9c58ef0f624442dbb8d4da34","ssdeep":"768:1sfKhch2iyLCfmLdpi/JWvmkTT1cwql0hc6vgyyOldRWGMec5WAFauWU7Yp7Qybd:GkuyLCfmLdbTDWGf6lxmp","tlshash":"11b20898729171a783d765d6003f4005e2fea860346d496cfe49d8d3bcb9e6a90b7f2c","size":24943,"data":"","first_seen":"2026-07-22T05:39:32.908015Z","last_seen":"2026-07-22T17:57:19.770496Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/Layout8-BApvegLt.js","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b03fc31bcb602f9e6ab8f1037d9cebb2","sha1":"e51ce57d035a0496f1aa92203269bf5ab7199bbe","sha256":"33ef88a43af21811ec9bdb70d938ae71ce453acc1f503748a01ba27352166911","sha512":"87bdb1e9fd19ac62739f3b9d5b205874f821a2dc5a018efe7b45ab8d3852da82885e6adc1f1cfaa601cc3227d9a070b0ab0c199314d40463ca8d873197c54486","ssdeep":"","tlshash":"fc11540fbd81ddb563ba0c9c7e7b603458a4251162fc96ebc364022e07f2067cdba59b","size":1035,"data":"","first_seen":"2026-07-22T05:39:32.912538Z","last_seen":"2026-07-22T17:57:19.764438Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/AsyncImage.vue_vue_type_script_setup_true_lang-Ck5p4PYp.js","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1400be9ea8a7afa2baec0c3ea4137b9","sha1":"8ce614a50c9b5c85a948a96e2b7c4c01cf2aa9d9","sha256":"a9a63704980e29eea831f162aea0c48abfd04b919a03daa2e19bb9abe02c7818","sha512":"0fdbc2e90a32a372383ad8892ec5e3fa1c696e261e437cbb35e7850284588bc8d9923c462d3d2e7fc3fc88ff6eef83dfdbf13e87d80a4fcc8d5aedb14ffbe6e2","ssdeep":"","tlshash":"9e01904dfaa986bcd36618c820365824210807495534c7d555b96bf375b6570e52772c","size":736,"data":"","first_seen":"2026-07-22T05:39:32.907034Z","last_seen":"2026-07-22T17:57:19.768344Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/h5_g1.rc4-DakNW57n.js","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"52bb801f37f4e7a48830e44abfbf7ff8","sha1":"4ab1695a6d2b733a87cc1a405afbebdc659b9b1c","sha256":"17c307c148f1d87908fa7bc0ca818baa256b6f03179fcf0868a0a8e9d0d3ea53","sha512":"d9e4fd50047351e3e9b97936391a3f170dfdb101f114afc08d638c721f34114ca2a5e6a15e104fa22ee7fb3fe9e59f6bcff9f53c1b832134e56bc899653b7257","ssdeep":"","tlshash":"ffc08c03288b2beb2531002a0b05a37410f208ad1ea803f0254e0e3487362830f0ab82","size":153,"data":"","first_seen":"2026-07-05T02:52:53.394744Z","last_seen":"2026-07-22T17:57:19.747588Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"laoshuka.com/","fqdn":"laoshuka.com","domain":"laoshuka.com","tld":"com"},"ip":{"addr":"172.65.235.97","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2daec250dc106f307311565aa730e693","sha1":"caa60a7369622319c7dcb00d3f2543aa1100ab92","sha256":"5e7e04db04ee47566deff5f881dacaae9d1623406b8d70d8e263d50797a5e3a5","sha512":"4e6c5a0f63cf2f0b83af8e41e24737e1e6c54d4fb5349f10ae2e43227f629009dbb9c0b053eceb2cca7037ec6ee2f09f62741c46e40dc437770126f69b479009","ssdeep":"","tlshash":"cb6000c280000008028202028002200800a300aa0800a8880000882802083000202280","size":17,"data":"","first_seen":"2025-03-04T08:38:13.955988Z","last_seen":"2026-07-23T00:00:33.510824Z","times_seen":2335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/mobile-detect-b3HJfJJf.js","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"142ccca844c1ca633b6818432bb62024","sha1":"1f593b55ee59dfc8ff2cc6eeaf177927c0f41ad3","sha256":"a90646f94793296d274e5be3e6bff6d4e8610ea5f70d90e0fce839d58056772a","sha512":"64ac9bac8542b9f6ae9766c1a209a0492de6e949ce80c2c02a1c08513c39c139b9b640ee88edd5d666af7294cadc76a4e65e5e4102dfdc4303f52a76fc08fe81","ssdeep":"1536:PwuoN+/C79qZ2IY9bCrFRI2qH2PtNPU9ArHM2ZfO0UVsC6pF34LWZtFN2297CKCS:PYNWZGHYZfrXF3ft72297CKJas9ft","tlshash":"13b37cc63f65b581637b60a0b03f204bf2b761276aad8451f114d9cfacec58a806bd7d","size":111606,"data":"","first_seen":"2025-09-18T10:35:25.457755Z","last_seen":"2026-07-22T17:57:19.773787Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"isIOSmap[actor:server1.conn0.watcher14.process9//obj32 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[__v_isRef:map[configurable:true enumerable:true value:true writable:true] __v_isShallow:map[configurable:true enumerable:true value:false writable:true] _rawValue:map[configurable:true enumerable:true value:false writable:true] _value:map[configurable:true enumerable:true value:false writable:true] dep:map[configurable:true enumerable:true value:map[type:undefined] writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://cdn-res-44.e14gm.com/assets/main-DaNSoxT0.js","line_number":62,"column_number":19001}]},"http":[{"url":{"schema":"https","addr":"32z.ccgzflsmelqphqqqqjeryytevh.com/djkfe/40633/mp2ga3","fqdn":"32z.ccgzflsmelqphqqqqjeryytevh.com","domain":"ccgzflsmelqphqqqqjeryytevh.com","tld":"com"},"ip":{"addr":"57.180.242.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T17:56:46.495Z","timestamp":1784743006495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ccgzflsmelqphqqqqjeryytevh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 20 Jun 2026 00:00:00 GMT","end":"Fri, 18 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:52:7A:0C:00:9F:34:05:EE:28:4D:3B:3C:62:E2:FA:27:EA:F4:1A","sha256":"0E:8F:70:D9:8A:AB:07:C7:52:5A:1B:03:5C:76:06:47:66:76:78:C7:EE:E9:B1:58:F3:A7:9A:4C:FB:37:2F:A5"}}},"request":{"raw":"GET /djkfe/40633/mp2ga3 HTTP/1.1\r\nHost: 32z.ccgzflsmelqphqqqqjeryytevh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://laoshuka.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 17:56:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 888\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":888,"size_decoded":1191,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9558362bca18e3e50d95088bf8f65109","sha1":"986b0e823a6691857b31c9a9548d5be519ee2390","sha256":"c2d96b9605429e60abb661d0fdf20ae620c53ff8afb291f3bdcb6604fc880695","sha512":"381b4ad6ef4796f544c02d02f5b3ed903698ec8e9512026d17bf13127c05ef9ccb54dd1aed05e50f5e6c18bd6f7ddda2cbbd02f6277a8ea5e7a107967991c8af","ssdeep":"","tlshash":"df11ab9608f2111b1263827035fbb208a02aa50b5394d450f94cd9d25ff0b6bd9832fd","first_seen":"2026-07-22T17:57:19.746157Z","last_seen":"2026-07-22T17:57:19.746157Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2025,"timings":{"blocked":0,"dns":889,"connect":254,"send":0,"wait":356,"receive":0,"ssl":526},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/h5_g1.rc4-DakNW57n.js","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.985Z","timestamp":1784743010985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /assets/h5_g1.rc4-DakNW57n.js HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-res-44.e14gm.com/?channel=mp2ga3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 153\r\ndate: Wed, 22 Jul 2026 17:54:12 GMT\r\naccept-ranges: bytes\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\netag: \"6a604202-99\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: A5ycGNKZW_JS8rnucQT6DBkhSWhg3is9PeVmwCE4ve1J1d9wJ89tzQ==\r\nage: 159\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153,"size_decoded":685,"mime_type":"application/javascript","magic":"ASCII text","md5":"52bb801f37f4e7a48830e44abfbf7ff8","sha1":"4ab1695a6d2b733a87cc1a405afbebdc659b9b1c","sha256":"17c307c148f1d87908fa7bc0ca818baa256b6f03179fcf0868a0a8e9d0d3ea53","sha512":"d9e4fd50047351e3e9b97936391a3f170dfdb101f114afc08d638c721f34114ca2a5e6a15e104fa22ee7fb3fe9e59f6bcff9f53c1b832134e56bc899653b7257","ssdeep":"","tlshash":"ffc08c03288b2beb2531002a0b05a37410f208ad1ea803f0254e0e3487362830f0ab82","first_seen":"2026-07-05T02:52:53.394744Z","last_seen":"2026-07-22T17:57:19.747588Z","times_seen":67,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www15.jz5ul.com/t.png?t=1784743011783","fqdn":"www15.jz5ul.com","domain":"jz5ul.com","tld":"com"},"ip":{"addr":"108.157.229.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:51.785Z","timestamp":1784743011785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jz5ul.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 30 May 2026 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:3A:18:AC:A1:6B:89:52:5F:0D:49:27:54:49:10:6B:21:33:13:52","sha256":"A4:38:64:CE:CB:52:DA:F6:BE:CD:39:20:FE:C5:CB:2A:2A:5A:22:8F:A2:17:96:10:8A:BE:B8:0A:C2:CB:30:AF"}}},"request":{"raw":"GET /t.png?t=1784743011783 HTTP/1.1\r\nHost: www15.jz5ul.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn-res-44.e14gm.com/\r\nOrigin: https://cdn-res-44.e14gm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/vnd.android.package-archive\r\ncontent-length: 2769\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Wed, 22 Jul 2026 17:56:53 GMT\r\nlast-modified: Wed, 22 Jul 2026 15:22:37 GMT\r\netag: \"a313d1682abdb394a576f33f38a097c9\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 cc81c6e9e0635b111f930d60fbded11e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\naccess-control-expose-headers: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nx-amz-cf-id: l96NTL_3VM2iVa-X1bSb-jHGK-6wWhUCT5qBfkznZN0ZjPuWGC_BUw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2769,"size_decoded":3430,"mime_type":"application/vnd.android.package-archive","magic":"PNG image data, 132 x 132, 8-bit colormap, non-interlaced","md5":"a313d1682abdb394a576f33f38a097c9","sha1":"864e8a4463efc924b626c8d0468edf6d7eef469b","sha256":"bf35d2d3d9e199bf3cf1bad9bf954fbee6515e06f81596f2c9c0f9268aa86376","sha512":"92b1b2e7ef6ea5f3cbf90a1921350d2d937eedf3de42a212a7d9690ff61f822ae5d610ea88c2e5bf38c87240364281bc603d870a5c7acf1ce148b69ac05f9c0b","ssdeep":"","tlshash":"8f515ba9fbcbc0f9d4b601f52da0a094c180bc0be60900eb30ceb45272a7df29a591c0","first_seen":"2025-09-18T10:35:25.467284Z","last_seen":"2026-07-22T17:57:19.748611Z","times_seen":228,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":-1,"dns":81,"connect":20,"send":0,"wait":592,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www15.jz5ul.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www24.0efgm.com/t.png?t=1784743011783","fqdn":"www24.0efgm.com","domain":"0efgm.com","tld":"com"},"ip":{"addr":"13.249.8.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:51.788Z","timestamp":1784743011788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0efgm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 17 Jun 2026 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:2C:35:EA:23:F6:9F:4B:79:6E:5D:87:7C:79:D7:81:F3:C4:51:76","sha256":"12:35:16:58:60:26:A7:27:AC:6A:CA:09:5F:92:E8:A8:09:56:9E:63:FD:E2:63:CC:6D:FE:5B:F7:7E:A0:4A:17"}}},"request":{"raw":"GET /t.png?t=1784743011783 HTTP/1.1\r\nHost: www24.0efgm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn-res-44.e14gm.com/\r\nOrigin: https://cdn-res-44.e14gm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/vnd.android.package-archive\r\ncontent-length: 2769\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Wed, 22 Jul 2026 17:56:53 GMT\r\nlast-modified: Wed, 22 Jul 2026 15:22:37 GMT\r\netag: \"a313d1682abdb394a576f33f38a097c9\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 11fe5f1070409a787adc650d65d889f4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\naccess-control-expose-headers: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nx-amz-cf-id: 82-YPHsi0ve_Wyfy6gLMSJYiX0GOulZoSV15qBx9b_XOl92Ah_jnLg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2769,"size_decoded":3430,"mime_type":"application/vnd.android.package-archive","magic":"PNG image data, 132 x 132, 8-bit colormap, non-interlaced","md5":"a313d1682abdb394a576f33f38a097c9","sha1":"864e8a4463efc924b626c8d0468edf6d7eef469b","sha256":"bf35d2d3d9e199bf3cf1bad9bf954fbee6515e06f81596f2c9c0f9268aa86376","sha512":"92b1b2e7ef6ea5f3cbf90a1921350d2d937eedf3de42a212a7d9690ff61f822ae5d610ea88c2e5bf38c87240364281bc603d870a5c7acf1ce148b69ac05f9c0b","ssdeep":"","tlshash":"8f515ba9fbcbc0f9d4b601f52da0a094c180bc0be60900eb30ceb45272a7df29a591c0","first_seen":"2025-09-18T10:35:25.467284Z","last_seen":"2026-07-22T17:57:19.748611Z","times_seen":228,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":0,"dns":81,"connect":19,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www24.0efgm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/h5_g_bg.rc4-kXmbsq88.webp","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:51.445Z","timestamp":1784743011445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /assets/h5_g_bg.rc4-kXmbsq88.webp HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn-res-44.e14gm.com/?channel=mp2ga3\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 61346\r\ndate: Wed, 22 Jul 2026 17:54:13 GMT\r\naccept-ranges: bytes\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\netag: \"6a604202-efa2\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: WX6kInZpZbvwzSYfuAgEbg5s8NfMybOpjJqO_9WqaO8P8Mr2GaVeDw==\r\nage: 158\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":61346,"size_decoded":61870,"mime_type":"image/webp","magic":"data","md5":"3fe2140cca008052a53dbbce89276d4f","sha1":"88794d487c395e494eebbc1da80633a0a18bc594","sha256":"6eea00c180f2b9d14e038477f9286e4e3f781db973c934bb6d7335d7240a82be","sha512":"535abc389946c6a9c3b6b46d1fd928bdcc05ee125ef0b66993810e093c344ee39d2cfc1cd723b1187abefcf3c25685da93014e13fcd12563ca3c6ab523880508","ssdeep":"1536:OFoYTXjVUUnIW6Wyo7I196uDvmGlJG9ooLC+V3hPmv:ONjVhnsf1EuDuG6ooL1K","tlshash":"b95302568d42a722c2d3f931241ae5b3f9685221e0b9450efb730c0615ff9fe7299acc","first_seen":"2026-07-05T02:52:53.395791Z","last_seen":"2026-07-22T17:57:19.75264Z","times_seen":67,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"laoshuka.com/favicon.ico","fqdn":"laoshuka.com","domain":"laoshuka.com","tld":"com"},"ip":{"addr":"172.65.235.97","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://laoshuka.com/","date":"2026-07-22T17:56:46.338Z","timestamp":1784743006338,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: laoshuka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://laoshuka.com/\r\nCookie: 8e1e7d123b048e6564033c7cf89994c0=e9ea01291bf87b90b678aa197ccac4cc\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 503 Service Temporarily Unavailable\r\nDate: Wed, 22 Jul 2026 17:56:46 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: 915afbbc3651b9df897254fe61a2ef8f=981297abf59ac7bda8e7ce9471a24dfc\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"Service Temporarily Unavailable","fingerprints":null,"data":{"size":55,"size_decoded":296,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"b25d3c49b996fd397d1ec1f02189586c","sha1":"b878ac9e9575ceec18e74cff70ec4be21b8fa8a8","sha256":"d45ee8448d3f60ed3bdbb829419dee91f0f6b3d8e72f29575ce7ddd1cc74f1e2","sha512":"c63b63ed39feec556cc3fb1ccbbcc8e850e2c9cd36894dc7aa1601e20d7622cb6de862e455f625cf31e66a0e1bd21c46ae879f66021005605062864305de1b04","ssdeep":"","tlshash":"7b9002c98c14c54d558115455475f04c16aa08964615e98914c19a1452043f90d12acd","first_seen":"2024-08-16T18:52:22Z","last_seen":"2026-07-23T00:00:33.475338Z","times_seen":2500,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/?channel=mp2ga3","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T17:56:49.772Z","timestamp":1784743009772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /?channel=mp2ga3 HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ndate: Wed, 22 Jul 2026 17:56:50 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6a604202-4131\"\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\ncache-control: no-cache\r\nexpires: Wed, 22 Jul 2026 17:56:49 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: pM3Co9TVpPbyPkKzrAP7H8hQa8PP9xuE3nWPW-_gNINVkWoeU-r-Ug==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":16689,"size_decoded":7330,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1109)","md5":"293454a29c7af655aaeff4e8c5bebef5","sha1":"8c88d75b1838827c25c39d7c11e5d63580d616d4","sha256":"51fed173ff52013c6a6534bea9ba0a22086a7cc6b1a98304ffb4534e5af3ccf8","sha512":"653b26fc2b903743ce8f881cbc1c12414145308e007ab710217e5d90e396df5c86d492453ce6f0045a106e54a2b39148843773c3d8394b0c72a6750f32dc747f","ssdeep":"192:aiBWKrBH8iN74Xt2L9R2bR+e1EtKoT/6sKAXV1nnuCZA9cZHTd4LIHnM5I4Rp0BX:9BrSie+uaKoT/lKW1nnuYnZHTOS4RcX","tlshash":"de72553e2af29ae4047740f2cd85370b9ae4a2bbd4e44481752f3b440fdac937a576d8","first_seen":"2026-07-22T05:39:32.908994Z","last_seen":"2026-07-22T17:57:19.755028Z","times_seen":3,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":73,"connect":28,"send":0,"wait":450,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/Layout8-B4aE3S-q.css","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.876Z","timestamp":1784743010876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /assets/Layout8-B4aE3S-q.css HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-res-44.e14gm.com/?channel=mp2ga3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 483\r\ndate: Wed, 22 Jul 2026 17:54:11 GMT\r\naccept-ranges: bytes\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\netag: \"6a604202-1e3\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: OmCzMmLgsRm1mfYWR27b0ZrMRzk35SvtDwqKYQjSD5Edkw-4h-FAZA==\r\nage: 158\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":483,"size_decoded":1002,"mime_type":"text/css","magic":"ASCII text, with very long lines (482)","md5":"68a54614cfbb854a8b2c7f52b3e1770c","sha1":"3d8c0296615f67610498537653fe47e9507ad4cd","sha256":"37f18c58814fa04fef7e4df63a5e2e0740884a66578cc70b7ecb1442c7b47b2a","sha512":"b7d26f401ee84fec047268550fe9b2bc048077c5d3599bbb96aab02e7d8f770a0a327a6eed5773aeb339810bb2e27169b3df24baebb274cc695554c42a6394b5","ssdeep":"","tlshash":"17f0894d09070906c18b06d264cc97de18174df79233488b3573905ed343aa477b6e35","first_seen":"2026-03-30T21:13:35.328109Z","last_seen":"2026-07-22T17:57:19.75578Z","times_seen":189,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cpi.landp2jdbpf.com/landing-page","fqdn":"cpi.landp2jdbpf.com","domain":"landp2jdbpf.com","tld":"com"},"ip":{"addr":"3.33.216.133","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.886Z","timestamp":1784743010886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.landp2jdbpf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"26:EE:20:A1:C6:8B:36:76:F6:FD:8D:54:58:DF:DA:6C:9E:B8:B8:31","sha256":"E5:44:18:9B:69:5D:C2:F1:C4:8B:8F:9B:EB:22:76:C5:E5:81:CB:CF:F8:10:F4:C5:A8:79:FB:35:4F:1A:3B:9E"}}},"request":{"raw":"OPTIONS /landing-page HTTP/1.1\r\nHost: cpi.landp2jdbpf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://cdn-res-44.e14gm.com/\r\nOrigin: https://cdn-res-44.e14gm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Wed, 22 Jul 2026 17:56:51 GMT\r\nserver: openresty\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, GET, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccess-control-max-age: 600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":354,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T09:24:24.202644Z","times_seen":17473079,"resource_available":true,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":36,"connect":1,"send":0,"wait":207,"receive":0,"ssl":416},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"cpi.landp2jdbpf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cpich.landp2jdbpf.com/channel/statistics","fqdn":"cpich.landp2jdbpf.com","domain":"landp2jdbpf.com","tld":"com"},"ip":{"addr":"3.33.216.133","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.887Z","timestamp":1784743010887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.landp2jdbpf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"26:EE:20:A1:C6:8B:36:76:F6:FD:8D:54:58:DF:DA:6C:9E:B8:B8:31","sha256":"E5:44:18:9B:69:5D:C2:F1:C4:8B:8F:9B:EB:22:76:C5:E5:81:CB:CF:F8:10:F4:C5:A8:79:FB:35:4F:1A:3B:9E"}}},"request":{"raw":"OPTIONS /channel/statistics HTTP/1.1\r\nHost: cpich.landp2jdbpf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://cdn-res-44.e14gm.com/\r\nOrigin: https://cdn-res-44.e14gm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Wed, 22 Jul 2026 17:56:51 GMT\r\nserver: openresty\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, GET, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccess-control-max-age: 600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":354,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T09:24:24.202644Z","times_seen":17473079,"resource_available":true,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":69,"connect":1,"send":0,"wait":207,"receive":0,"ssl":415},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"cpich.landp2jdbpf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/WebMain-Do7eQ-TR.js","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.974Z","timestamp":1784743010974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /assets/WebMain-Do7eQ-TR.js HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-res-44.e14gm.com/?channel=mp2ga3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Wed, 22 Jul 2026 17:56:51 GMT\r\ncontent-encoding: br\r\netag: W/\"6a604202-1f07\"\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: UgsUuUMqCCaiO2Q8F-jz1W21w3vNsd39A8-6NPApf_2zLLH-qphM0Q==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7943,"size_decoded":5000,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (7796)","md5":"3f34f7503c0013c42c3fc8aa5817ec5f","sha1":"82934026a176321395d2ca9f371502c3e90272a1","sha256":"e7d56ad5cba7b150579b2f6d635ea2e72d87cdfe809cf9504b17220af56854f5","sha512":"796c1ea7aa01b7ce8dca7e0c5068099c1c3dc0c0a87f0ca6e4ecf8b04ec872d72d81bbb3cb3af69d7f95f3b5976f3a595f2c46b06ecc086204ae3234297c1241","ssdeep":"192:1Mk10/gxnuJ3KrnKp0WOrw9Uepcj0wNUn+SK1Mi5phj6aJCrv:1MkAgxuJkdVSKVpyrv","tlshash":"5ef12bc5a017cf7cc2a7966020227452ee8dafd9c0e8ed56a0f85d1938c14f0dea527c","first_seen":"2026-07-22T05:39:32.900834Z","last_seen":"2026-07-22T17:57:19.759521Z","times_seen":3,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/main-CpBFWFGv.css","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.449Z","timestamp":1784743010449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /assets/main-CpBFWFGv.css HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-res-44.e14gm.com/?channel=mp2ga3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ndate: Wed, 22 Jul 2026 17:54:10 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6a604202-1862a\"\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: edtmViF_vYK3kFlwMS99p339DWo5u59k3y78ivO7ExPutcklWkJE2w==\r\nage: 160\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":99882,"size_decoded":40938,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a2358457e00107dcc1f8d55aabab7d82","sha1":"2ced63c438dc8c6cf434e93cee0a8bc1e82a8113","sha256":"d2480b3e89908ce705a80d3a632292689f72cb46b722649ccfa24381bf1efd08","sha512":"9cecad087fda1b468eec013a8c6da5320a6cdc52198f34108f7dafee6c5f7e31c12e05daf466fd41a0784e50277977c163a651ec0e7bb5b0354540a22745c621","ssdeep":"3072:GajFoeL+f62sfD88H8N713VjmvezqElk2hH:lXL+f62sfD88H8N713Vqv2qElk2hH","tlshash":"e5a31a6e2e16103e3c2f81f2d075bfdca609f480db262abb994361356fc17f2187a655","first_seen":"2026-07-05T02:52:53.390251Z","last_seen":"2026-07-22T17:57:19.760818Z","times_seen":67,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/Layout8-BApvegLt.js","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.874Z","timestamp":1784743010874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /assets/Layout8-BApvegLt.js HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-res-44.e14gm.com/?channel=mp2ga3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Wed, 22 Jul 2026 17:54:11 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6a604202-40b\"\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: Uhyu4nGg4rl14-gXJ2hIND8Hd4dkevMzOWIVbUJHcV_ty9ZNFoDhNw==\r\nage: 159\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1035,"size_decoded":1127,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (585)","md5":"b03fc31bcb602f9e6ab8f1037d9cebb2","sha1":"e51ce57d035a0496f1aa92203269bf5ab7199bbe","sha256":"33ef88a43af21811ec9bdb70d938ae71ce453acc1f503748a01ba27352166911","sha512":"87bdb1e9fd19ac62739f3b9d5b205874f821a2dc5a018efe7b45ab8d3852da82885e6adc1f1cfaa601cc3227d9a070b0ab0c199314d40463ca8d873197c54486","ssdeep":"","tlshash":"fc11540fbd81ddb563ba0c9c7e7b603458a4251162fc96ebc364022e07f2067cdba59b","first_seen":"2026-07-22T05:39:32.912538Z","last_seen":"2026-07-22T17:57:19.764438Z","times_seen":3,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cpich.landp2jdbpf.com/channel/statistics","fqdn":"cpich.landp2jdbpf.com","domain":"landp2jdbpf.com","tld":"com"},"ip":{"addr":"3.33.216.133","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.881Z","timestamp":1784743010881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.landp2jdbpf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"26:EE:20:A1:C6:8B:36:76:F6:FD:8D:54:58:DF:DA:6C:9E:B8:B8:31","sha256":"E5:44:18:9B:69:5D:C2:F1:C4:8B:8F:9B:EB:22:76:C5:E5:81:CB:CF:F8:10:F4:C5:A8:79:FB:35:4F:1A:3B:9E"}}},"request":{"raw":"POST /channel/statistics HTTP/1.1\r\nHost: cpich.landp2jdbpf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn-res-44.e14gm.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer 6sHdXgiC8FFKkfAyR4EMrlyAMuV0DBG4itzeMglyFHponGYXFwl7tf31BPB4TwMX\r\nContent-Length: 66\r\nOrigin: https://cdn-res-44.e14gm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":66,"data":"{\"type\":1,\"affCode\":null,\"platform\":\"other\",\"channelUrl\":\"mp2ga3\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 17:56:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: openresty\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62,"size_decoded":308,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"283421874eff62d8ea639f60da3cea43","sha1":"3716145c43058ea1c17ed09f59e71e5c2b476ae8","sha256":"22848a9e94f865aa0d6793860e7f5f1907fc543c1474b416b66f34e5d0288bb0","sha512":"4af39eb758095ca4ea49dde67bea19f5ed6b4a59380fe8dfcf549ec69c8a02e194d2d95ed9b2225abe5f5d2749b41a375cf8a870a578d1c2b6912632d769af60","ssdeep":"","tlshash":"aca002434a2478f5e3033101f52eaf1426e810d3a040103aa8ae466e8f16667368351a","first_seen":"2025-09-20T12:46:42.05019Z","last_seen":"2026-07-22T17:57:19.767173Z","times_seen":163,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"cpich.landp2jdbpf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/pc_bg-B4tax13R.jpg","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.884Z","timestamp":1784743010884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /assets/pc_bg-B4tax13R.jpg HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-res-44.e14gm.com/assets/main-CpBFWFGv.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 77369\r\ndate: Wed, 22 Jul 2026 17:54:11 GMT\r\naccept-ranges: bytes\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\netag: \"6a604202-12e39\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: NvlC4XjvtcHRyXFgC0w8F6NG5d2awJQoU9LWAzUEsrJgNkUxUiziew==\r\nage: 159\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":77369,"size_decoded":77911,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3","md5":"2a42fc98e596fa6c1fd8715895e6b5c3","sha1":"ba0a73b66ff0b6976857457b11a62ae70cf203f5","sha256":"71f02f0d2831c9f4d0546967b257b2c9782810ef2ec83e3ee19980d9b35e455e","sha512":"d1b82649558522c828265d2e29ca3e1c4d1c3ee254ae4ccf137b31855789e37dc9266d8b9e477b4456e20eaec348e85a3e34481fe9835781389624f1ce0bd7fa","ssdeep":"1536:qtZz/a8lILeCCM0GyVaHCZDf4lkoVzUA8OZGgtpiG77W2CtUvSgjAXLT1Y:WyKIqCCH3UHCuujA8OZG4piIofg1","tlshash":"d1730287a87389cefd5d36044f41d93a9f68f3036578bab91b02ec4e2f699e521d4201","first_seen":"2026-03-30T21:13:35.330713Z","last_seen":"2026-07-22T17:57:19.767768Z","times_seen":189,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/AsyncImage.vue_vue_type_script_setup_true_lang-Ck5p4PYp.js","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.976Z","timestamp":1784743010976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /assets/AsyncImage.vue_vue_type_script_setup_true_lang-Ck5p4PYp.js HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-res-44.e14gm.com/?channel=mp2ga3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 736\r\ndate: Wed, 22 Jul 2026 17:54:12 GMT\r\naccept-ranges: bytes\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\netag: \"6a604202-2e0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: QuLvLj-36hvF7kmv5i1vSw5OOSO-4CAnI95pgRiu-P-Jgqj-FuXBjQ==\r\nage: 158\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":736,"size_decoded":1269,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (735)","md5":"c1400be9ea8a7afa2baec0c3ea4137b9","sha1":"8ce614a50c9b5c85a948a96e2b7c4c01cf2aa9d9","sha256":"a9a63704980e29eea831f162aea0c48abfd04b919a03daa2e19bb9abe02c7818","sha512":"0fdbc2e90a32a372383ad8892ec5e3fa1c696e261e437cbb35e7850284588bc8d9923c462d3d2e7fc3fc88ff6eef83dfdbf13e87d80a4fcc8d5aedb14ffbe6e2","ssdeep":"","tlshash":"9e01904dfaa986bcd36618c820365824210807495534c7d555b96bf375b6570e52772c","first_seen":"2026-07-22T05:39:32.907034Z","last_seen":"2026-07-22T17:57:19.768344Z","times_seen":3,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"laoshuka.com/","fqdn":"laoshuka.com","domain":"laoshuka.com","tld":"com"},"ip":{"addr":"172.65.235.97","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T17:56:46.230Z","timestamp":1784743006230,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: laoshuka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://laoshuka.com/\r\nCookie: 8e1e7d123b048e6564033c7cf89994c0=e9ea01291bf87b90b678aa197ccac4cc\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 22 Jul 2026 17:56:46 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://32z.ccgzflsmelqphqqqqjeryytevh.com/djkfe/40633/mp2ga3\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T09:24:24.202644Z","times_seen":17473079,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cpiv4.landp2jdbpf.com/landing-page","fqdn":"cpiv4.landp2jdbpf.com","domain":"landp2jdbpf.com","tld":"com"},"ip":{"addr":"3.33.216.133","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.877Z","timestamp":1784743010877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.landp2jdbpf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"26:EE:20:A1:C6:8B:36:76:F6:FD:8D:54:58:DF:DA:6C:9E:B8:B8:31","sha256":"E5:44:18:9B:69:5D:C2:F1:C4:8B:8F:9B:EB:22:76:C5:E5:81:CB:CF:F8:10:F4:C5:A8:79:FB:35:4F:1A:3B:9E"}}},"request":{"raw":"OPTIONS /landing-page HTTP/1.1\r\nHost: cpiv4.landp2jdbpf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://cdn-res-44.e14gm.com/\r\nOrigin: https://cdn-res-44.e14gm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Wed, 22 Jul 2026 17:56:51 GMT\r\nserver: openresty\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, GET, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccess-control-max-age: 600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":354,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T09:24:24.202644Z","times_seen":17473079,"resource_available":true,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":27,"connect":8,"send":0,"wait":207,"receive":0,"ssl":410},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"cpiv4.landp2jdbpf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"laoshuka.com/","fqdn":"laoshuka.com","domain":"laoshuka.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T17:56:44.551Z","timestamp":1784743004551,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: laoshuka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T09:24:24.202644Z","times_seen":17473079,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www24.3z86k.com/t.png?t=1784743011783","fqdn":"www24.3z86k.com","domain":"3z86k.com","tld":"com"},"ip":{"addr":"13.249.8.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:51.787Z","timestamp":1784743011787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3z86k.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 17 Jun 2026 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:64:65:1F:E9:05:6B:94:5B:82:E3:19:E6:0F:CD:47:09:ED:FF:F2","sha256":"0B:06:A0:8E:04:EF:AE:C0:DF:34:38:04:6B:26:19:EA:9E:B1:02:6F:47:F4:8A:DA:1D:1D:4D:2B:8F:ED:A0:70"}}},"request":{"raw":"GET /t.png?t=1784743011783 HTTP/1.1\r\nHost: www24.3z86k.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn-res-44.e14gm.com/\r\nOrigin: https://cdn-res-44.e14gm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/vnd.android.package-archive\r\ncontent-length: 2769\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Wed, 22 Jul 2026 17:56:53 GMT\r\nlast-modified: Wed, 22 Jul 2026 15:22:37 GMT\r\netag: \"a313d1682abdb394a576f33f38a097c9\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 4cb92bb7ec58a91bffe664e66862dd94.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-expose-headers: *\r\nx-amz-cf-id: MjnZyExfQ_LmxHameq6aext460n0BxQij45r66EfXmu4B2LCRu4wkg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2769,"size_decoded":3430,"mime_type":"application/vnd.android.package-archive","magic":"PNG image data, 132 x 132, 8-bit colormap, non-interlaced","md5":"a313d1682abdb394a576f33f38a097c9","sha1":"864e8a4463efc924b626c8d0468edf6d7eef469b","sha256":"bf35d2d3d9e199bf3cf1bad9bf954fbee6515e06f81596f2c9c0f9268aa86376","sha512":"92b1b2e7ef6ea5f3cbf90a1921350d2d937eedf3de42a212a7d9690ff61f822ae5d610ea88c2e5bf38c87240364281bc603d870a5c7acf1ce148b69ac05f9c0b","ssdeep":"","tlshash":"8f515ba9fbcbc0f9d4b601f52da0a094c180bc0be60900eb30ceb45272a7df29a591c0","first_seen":"2025-09-18T10:35:25.467284Z","last_seen":"2026-07-22T17:57:19.748611Z","times_seen":228,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":95,"connect":16,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/h5_g1.rc4-C66X5yYh.webp","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:51.442Z","timestamp":1784743011442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /assets/h5_g1.rc4-C66X5yYh.webp HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn-res-44.e14gm.com/?channel=mp2ga3\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 119830\r\ndate: Wed, 22 Jul 2026 17:54:13 GMT\r\naccept-ranges: bytes\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\netag: \"6a604202-1d416\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: JpxtjtzF-dsUW4TxGexnZ9yMR0IuKxX5LaxM89Pet-oYrO6NHWrPJg==\r\nage: 158\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":119830,"size_decoded":120356,"mime_type":"image/webp","magic":"data","md5":"c2d0975e8bf576f446a8012c78d518ac","sha1":"f5df3f43dfe137ffe7f7f397e3b316d88bf28078","sha256":"ed71ffce96655ef04e60f3d9df4dd759dedcd21cd1ac5f4782fd60015ab0c730","sha512":"83c4e835487d1402bb52b9f28effc32bbe4ef5619bc1b76299cc06a2a36288c59befeebb3e48c1e5de0c6751987ee2ba9b663c7951b3b452b255bd291ffdc863","ssdeep":"1536:MrKclaYxaRURvhgb03xRREZrh9s16/QNm71Y+huGq84ShbNo97VEf9RALxalmiBg:NclaYk6g43ruDphBh3qR3eqVO/77I","tlshash":"3ac3126ac7b90625e31b10b755570cec0e17897df0fee2a93d7982d2867a9371f8c818","first_seen":"2026-07-05T02:52:53.392125Z","last_seen":"2026-07-22T17:57:19.769061Z","times_seen":67,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/main-DaNSoxT0.js","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.445Z","timestamp":1784743010445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /assets/main-DaNSoxT0.js HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-res-44.e14gm.com/?channel=mp2ga3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Wed, 22 Jul 2026 17:54:10 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6a604202-20d82\"\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: 7icAmZgg5oixUSAk3zDlS3xwgoeXeUbVB6syJbd82p3sbkaECoNoXA==\r\nage: 160\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":134530,"size_decoded":56719,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49710)","md5":"97ab720554c0564b0fd2698571afdd5f","sha1":"9cc5683dacb5e209011dab69708e2c581b73d46b","sha256":"0aceebc7e11b7dee403aea05a33af519804376ee9b50dcad89a9061650260222","sha512":"d4e07c3160c0e397f8691a8c8c36b6ec4e839a8dfe18487edafc7998378fcf97e6fbee71ea793c4521ae8279808e2a9b624bff6b32e28432fc615ca696eeba84","ssdeep":"3072:fpXQw8gOq6+/+oT5kDmOL7UleDtRC5YC5:fRQl5qt5mYlWtRC5YC5","tlshash":"60d34af87182b63513ea19e180b70006b73d1d65784994e4b0adeccf3e7a49550abfbe","first_seen":"2026-07-22T05:39:32.911592Z","last_seen":"2026-07-22T17:57:19.76976Z","times_seen":3,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/QrCode.vue_vue_type_script_setup_true_lang-BIjQtLwD.js","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.978Z","timestamp":1784743010978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /assets/QrCode.vue_vue_type_script_setup_true_lang-BIjQtLwD.js HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-res-44.e14gm.com/?channel=mp2ga3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Wed, 22 Jul 2026 17:56:51 GMT\r\ncontent-encoding: br\r\netag: W/\"6a604202-616f\"\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: I62bz-6pHdzSWU913FvpvCusyR9fvJr-a6xaUEszyeEsKUYdV3TeZQ==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24943,"size_decoded":10115,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8038)","md5":"5d2ec58c8114af2dd0de61de9ae1c879","sha1":"c2c6203e74dc596dcdecdbf87c2c903e07ca11dd","sha256":"a5540d8e991abc342773252e373be2ea6aae30d5ff2661330881f237a5d3e4bf","sha512":"01963e4879b775e649c8aa0a2142dbb48afe24f169628e05aaf6636c782e1dbbdabe7b9fe35187d1b5741658ec98fd62635a97cd9c58ef0f624442dbb8d4da34","ssdeep":"768:1sfKhch2iyLCfmLdpi/JWvmkTT1cwql0hc6vgyyOldRWGMec5WAFauWU7Yp7Qybd:GkuyLCfmLdbTDWGf6lxmp","tlshash":"11b20898729171a783d765d6003f4005e2fea860346d496cfe49d8d3bcb9e6a90b7f2c","first_seen":"2026-07-22T05:39:32.908015Z","last_seen":"2026-07-22T17:57:19.770496Z","times_seen":3,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"laoshuka.com/","fqdn":"laoshuka.com","domain":"laoshuka.com","tld":"com"},"ip":{"addr":"172.65.235.97","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T17:56:45.631Z","timestamp":1784743005631,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: laoshuka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 503 Service Temporarily Unavailable\r\nDate: Wed, 22 Jul 2026 17:56:46 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: 8e1e7d123b048e6564033c7cf89994c0=e9ea01291bf87b90b678aa197ccac4cc\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"Service Temporarily Unavailable","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T09:24:24.202644Z","times_seen":17473079,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32z.ccgzflsmelqphqqqqjeryytevh.com/favicon.ico","fqdn":"32z.ccgzflsmelqphqqqqjeryytevh.com","domain":"ccgzflsmelqphqqqqjeryytevh.com","tld":"com"},"ip":{"addr":"57.180.242.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://32z.ccgzflsmelqphqqqqjeryytevh.com/djkfe/40633/mp2ga3","date":"2026-07-22T17:56:48.700Z","timestamp":1784743008700,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 32z.ccgzflsmelqphqqqqjeryytevh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T09:24:24.202644Z","times_seen":17473079,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cpiv4.landp2jdbpf.com/landing-page","fqdn":"cpiv4.landp2jdbpf.com","domain":"landp2jdbpf.com","tld":"com"},"ip":{"addr":"3.33.216.133","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.869Z","timestamp":1784743010869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.landp2jdbpf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"26:EE:20:A1:C6:8B:36:76:F6:FD:8D:54:58:DF:DA:6C:9E:B8:B8:31","sha256":"E5:44:18:9B:69:5D:C2:F1:C4:8B:8F:9B:EB:22:76:C5:E5:81:CB:CF:F8:10:F4:C5:A8:79:FB:35:4F:1A:3B:9E"}}},"request":{"raw":"POST /landing-page HTTP/1.1\r\nHost: cpiv4.landp2jdbpf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn-res-44.e14gm.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer 6sHdXgiC8FFKkfAyR4EMrlyAMuV0DBG4itzeMglyFHponGYXFwl7tf31BPB4TwMX\r\nContent-Length: 128\r\nOrigin: https://cdn-res-44.e14gm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"r8OASFQApwnvJrP1LjWykujl1lHBf6XZQ5upyD5huI12Z/0igJw3bbbaO2lISlFlh2lj4eA6LqR8OuhLwGbUt2WjREUCGJKuFKt6y6GVfGiKA4KYtWDxzPqWVxXhFvIB"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 17:56:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: openresty\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1970,"size_decoded":2216,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"506196b2842b9f4cdac91f2a4ddbbf51","sha1":"b9108c9f1199ac29af07bb2337a17652ed2ade14","sha256":"7796332087aa163536911714c6bcf880cff51769bddef2b11f833dcdfd432be7","sha512":"d11d1cfee341a815c1366eaec29f252772fa63183677aabe2bce12ea60d9420f1eb41d2b446e9565796f285112634d7c8a86959d73ec84f86425fe359fcecc4c","ssdeep":"","tlshash":"43412ac928352101a60f314c307d9dee8e9506b3fdb81c98437b6b793b2c61dae7594c","first_seen":"2026-07-22T17:57:19.771586Z","last_seen":"2026-07-22T17:57:19.771586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"cpiv4.landp2jdbpf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/logo-mfC68wtC.png","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:52.216Z","timestamp":1784743012216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /assets/logo-mfC68wtC.png HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-res-44.e14gm.com/?channel=mp2ga3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 15990\r\ndate: Wed, 22 Jul 2026 17:54:13 GMT\r\naccept-ranges: bytes\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\netag: \"6a604202-3e76\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: 3nCKwLpGgx7cCn850ttgqDtEQZHlVzsE0cuhvxQi5nA-KqteiEaaPw==\r\nage: 159\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15990,"size_decoded":16530,"mime_type":"image/png","magic":"PNG image data, 201 x 200, 8-bit/color RGBA, non-interlaced","md5":"ac5c9e4783633a6bb4e6de639262a007","sha1":"db8471eeb589141370c52889fb3abdee4b455a30","sha256":"24ed7422d0549141c986109eb306e8aa5f4b1752d7039749950f5ba7c6d48267","sha512":"0738994e8e8fac423c478169a4e47e205e0aa575f4d75d0bdda1c49de2cc28f86ba326eb60fa93ae79534bf6a19d85e4f35b5dd1116e821e9d64c5a1b9b51e3f","ssdeep":"384:QV/P2hpty43+lYM9NoEb3ibaiYmXGyJBzBgxe1dsP:U/gHyWO9Ggx8Rzu81dsP","tlshash":"3872d0a2a7cc53744bc04f370ab69663014de5867b37646e8a798c2a49cfa4ec13e0f4","first_seen":"2025-06-05T17:27:45.528361Z","last_seen":"2026-07-22T17:57:19.772765Z","times_seen":223,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/mobile-detect-b3HJfJJf.js","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.447Z","timestamp":1784743010447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /assets/mobile-detect-b3HJfJJf.js HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-res-44.e14gm.com/?channel=mp2ga3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Wed, 22 Jul 2026 17:54:10 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6a604202-1b3f6\"\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: HL-4ZeOC1egnl9ty9wZ0oI_AJuLH8qLesqJb3IiKfmrTZRC8LMiMlg==\r\nage: 160\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":111606,"size_decoded":43962,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28312)","md5":"142ccca844c1ca633b6818432bb62024","sha1":"1f593b55ee59dfc8ff2cc6eeaf177927c0f41ad3","sha256":"a90646f94793296d274e5be3e6bff6d4e8610ea5f70d90e0fce839d58056772a","sha512":"64ac9bac8542b9f6ae9766c1a209a0492de6e949ce80c2c02a1c08513c39c139b9b640ee88edd5d666af7294cadc76a4e65e5e4102dfdc4303f52a76fc08fe81","ssdeep":"1536:PwuoN+/C79qZ2IY9bCrFRI2qH2PtNPU9ArHM2ZfO0UVsC6pF34LWZtFN2297CKCS:PYNWZGHYZfrXF3ft72297CKJas9ft","tlshash":"13b37cc63f65b581637b60a0b03f204bf2b761276aad8451f114d9cfacec58a806bd7d","first_seen":"2025-09-18T10:35:25.457755Z","last_seen":"2026-07-22T17:57:19.773787Z","times_seen":234,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cpi.landp2jdbpf.com/landing-page","fqdn":"cpi.landp2jdbpf.com","domain":"landp2jdbpf.com","tld":"com"},"ip":{"addr":"3.33.216.133","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:50.879Z","timestamp":1784743010879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.landp2jdbpf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"26:EE:20:A1:C6:8B:36:76:F6:FD:8D:54:58:DF:DA:6C:9E:B8:B8:31","sha256":"E5:44:18:9B:69:5D:C2:F1:C4:8B:8F:9B:EB:22:76:C5:E5:81:CB:CF:F8:10:F4:C5:A8:79:FB:35:4F:1A:3B:9E"}}},"request":{"raw":"POST /landing-page HTTP/1.1\r\nHost: cpi.landp2jdbpf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn-res-44.e14gm.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer 6sHdXgiC8FFKkfAyR4EMrlyAMuV0DBG4itzeMglyFHponGYXFwl7tf31BPB4TwMX\r\nContent-Length: 128\r\nOrigin: https://cdn-res-44.e14gm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"r8OASFQApwnvJrP1LjWykujl1lHBf6XZQ5upyD5huI12Z/0igJw3bbbaO2lISlFlh2lj4eA6LqR8OuhLwGbUt2WjREUCGJKuFKt6y6GVfGiKA4KYtWDxzPqWVxXhFvIB"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 17:56:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: openresty\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1970,"size_decoded":2216,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a88b069a0853ab92e8678ba92c23876a","sha1":"6052cc533704b0a2d16afe9fb0611ca459eec6a2","sha256":"ef1b035ce6ac6e9425f1451e14daa73cb78824843c826ef73222b9010c6f6724","sha512":"17d0595600b28b888ed9c9bac2c8a56ee72d9b08796190377333f777f60bb63cc6cbad7f0db680388ff444a4f692baa716f3524a976ad2246fe353cfdabe9a73","ssdeep":"","tlshash":"8f414cd3c1a34c86156c3e5df4699b021ffb542ad8e400043b938df88e56702d7bf495","first_seen":"2026-07-22T17:57:19.775409Z","last_seen":"2026-07-22T17:57:19.775409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"cpi.landp2jdbpf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-res-44.e14gm.com/assets/pc_t1.rc4-BaM21L2_.webp","fqdn":"cdn-res-44.e14gm.com","domain":"e14gm.com","tld":"com"},"ip":{"addr":"65.9.46.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-res-44.e14gm.com/?channel=mp2ga3","date":"2026-07-22T17:56:51.446Z","timestamp":1784743011446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e14gm.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Jun 2026 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:22:8D:E1:2B:C0:DD:A9:FB:FF:23:EF:71:46:0C:AB:D2:F8:A5:79","sha256":"23:82:33:FC:01:5D:6B:E6:AD:6F:F2:68:CC:D6:19:3F:E2:95:60:69:C0:AF:06:E8:9C:88:2B:84:39:F7:EF:F1"}}},"request":{"raw":"GET /assets/pc_t1.rc4-BaM21L2_.webp HTTP/1.1\r\nHost: cdn-res-44.e14gm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn-res-44.e14gm.com/?channel=mp2ga3\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 60484\r\ndate: Wed, 22 Jul 2026 17:56:51 GMT\r\naccept-ranges: bytes\r\nserver: openresty\r\nlast-modified: Wed, 22 Jul 2026 04:07:30 GMT\r\netag: \"6a604202-ec44\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: BR0JOZssldKmSPnjBGnwqv_Gqy-9gHABSHIVt5aMrtTPfXqd2IFoBA==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60484,"size_decoded":60999,"mime_type":"image/webp","magic":"data","md5":"d7a4e515574516a6e27299c4d89db0fa","sha1":"0d28d631d41b2a003e7ce2d42616336c0c642354","sha256":"eb177619108ef2ab96fa33200d334c5cb528175129c0f7f6fb21761dc5a88221","sha512":"c063888c846d1b97617742dffce34575181a64f1e91b2de11be0f2590072bef82d172697e44beb5b52c3e45956237082bb5280c96ad46a9ee1e27fd61ed3d461","ssdeep":"768:tkQ5eq6yP2d6t3ONbhMWAWqCTzWdEMlW8lov/844sR/W+boEt3EpRwv9cQRJ1aFk:tiqCdJdP1qWv3qo++boEt3g5EDaF+sK","tlshash":"1f4302185722b572ece37f75c93648302e3ea5d26f31196f0b2d1ec3b6d6c822a192c4","first_seen":"2026-03-30T21:13:35.315087Z","last_seen":"2026-07-22T17:57:19.77699Z","times_seen":189,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":420,"receive":376,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}