{"report_id":"17dff31c-a947-4e13-a711-4b359a7bbb8d","version":6,"status":"done","tags":[],"date":"2026-01-23T12:44:25Z","url":{"schema":"http","addr":"usdc.wssrvip.vip","fqdn":"usdc.wssrvip.vip","domain":"wssrvip.vip","tld":"vip"},"ip":{"addr":"154.201.77.87","port":0,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"usdc.wssrvip.vip/","fqdn":"usdc.wssrvip.vip","domain":"wssrvip.vip","tld":"vip"},"title":"CIRCLE","dom":{"size":201466,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (64530)","md5":"5ebdef5c171966c805f78d2b17a7f885","sha1":"cdaae2c3bae8636dd95724aba6641062d0c6c9df","sha256":"2dd0999cee19357cb4350fd6e53f6a8cf504cc1b65538fa8d47602f1e89d6b21","sha512":"1c427c04f698ff7d238e917d95ea2a2da37fc0453f6d51d25268b56c8e4fc3a8106bf01baf11c8faad830d4ec4d693034a94a1c5b3a6dbb433ee720496f89964","ssdeep":"1536:rLoQxht7Pl76MLcrovkaiYMbmXiLShDHEsbr8j:rLoQxr97u3aiYMaXiLEba","tlshash":"0b147988b2553b38787ec327e560a78b301af202bafddd77f5143e8a574ad04c54a58b","dom_hash":"domhash8c5909c5b42c90097e0e157a27b824a9","first_seen":"2026-01-23T12:26:16.935672Z","last_seen":"2026-01-23T12:44:27.808525Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"usdc.wssrvip.vip","fqdn":"usdc.wssrvip.vip","domain":"wssrvip.vip","tld":"vip"},"ip":{"addr":"154.201.77.87","port":0,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-27T12:44:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"houtai.ssse.top","ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"domain_registered":"2026-01-14","domain_rank":0,"first_seen":"2026-01-23T12:26:07.935201Z","last_seen":"2026-01-23T12:26:07.935201Z","alert_count":0,"request_count":1,"received_data":890,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"usdc.wssrvip.vip","ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"domain_registered":"2025-08-16","domain_rank":0,"first_seen":"2026-01-23T12:26:07.93367Z","last_seen":"2026-01-23T12:26:07.933671Z","alert_count":18,"request_count":6,"received_data":3177388,"sent_data":3300,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kfvip.dlyunkefu.com","ip":{"addr":"47.246.48.182","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-01-27","domain_rank":0,"first_seen":"2025-10-02T13:05:40.455787Z","last_seen":"2026-01-23T12:26:52.293881Z","alert_count":0,"request_count":3,"received_data":275757,"sent_data":1749,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"mdkqybhkbstatic-1.tos-accelerate.volces.com","ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"domain_registered":"2020-11-24","domain_rank":0,"first_seen":"2025-08-26T01:11:49.573281Z","last_seen":"2026-01-23T12:26:08.569635Z","alert_count":0,"request_count":1,"received_data":2185,"sent_data":491,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kfvip.dlyunkefu.com/Web/js/mivisit.js?_=t","fqdn":"kfvip.dlyunkefu.com","domain":"dlyunkefu.com","tld":"com"},"ip":{"addr":"47.246.48.182","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb7ca16b201446a5c124023ebefb0313","sha1":"a62e2876cc2e5bd35df6d4fd540a7e1745581b48","sha256":"5a1cbff45f72e753309f924736d1ab7d1dc1526ad46df28a1efa7ac513c65842","sha512":"8080a0e90b347966d922a82fd2499b440644651396ffe887699b95418ed1696e2ef216c21aa5dec0e1a6f90f16e16200028e78b80372e32fd3e1c3ec0016d358","ssdeep":"1536:7YO1FBWy+n3m4+wK4hDkgUkHQuj9LR+PiVWkdknlkltNYHT3IzzbtDqqk+6YsQeQ:8BR+N4hz1FVWkdknVDqhCQeQ","tlshash":"e24401e653e52ebd5d739614bd3b788cd8fd2cd50a8b904ea223b848ca7d5c143a1339","size":273035,"data":"","first_seen":"2025-12-07T15:04:07.748224Z","last_seen":"2026-03-28T18:24:47.504401Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kfvip.dlyunkefu.com/api/visit?act=init\u0026cptid=1e111567091f85173a\u0026device=0\u0026lng=en\u0026page=https%3A%2F%2Fusdc.wssrvip.vip%2F\u0026callback=jsonp17691722438990","fqdn":"kfvip.dlyunkefu.com","domain":"dlyunkefu.com","tld":"com"},"ip":{"addr":"47.246.48.182","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa0c88c02fbf4f139684775f1ec5109","sha1":"4739d742d7fc0727942e067c99b25309b7b7ddab","sha256":"e0ff6d8804886791ea512d5b45cf1ccaef17e3b0b219666a947caf6017c6c29e","sha512":"ecf6d85b7f58ede8374539d3c029210a63197782c844efc9b03d88248f2c6a368114fc6ad5b0d6e59bc976391f545abbc7634767733c9460901cc2475c704162","ssdeep":"","tlshash":"5d1190084efb7a114b1ed2526c5fa58d846d3952eec40a70c77d481466c4a07b37554b","size":951,"data":"","first_seen":"2026-01-23T12:44:27.811481Z","last_seen":"2026-01-23T12:44:27.811481Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kfvip.dlyunkefu.com/api/visit?act=start\u0026accountid=159011\u0026visitorid=4725655603482617714\u0026device=0\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026page=https%3A%2F%2Fusdc.wssrvip.vip%2F\u0026pagetitle=CIRCLE\u0026lng=en\u0026color=24\u0026screen=1280*1024\u0026timezone=0\u0026visittimes=0\u0026cseqid=1000000000\u0026cptid=1e111567091f85173a\u0026callback=jsonp17691722441591","fqdn":"kfvip.dlyunkefu.com","domain":"dlyunkefu.com","tld":"com"},"ip":{"addr":"47.246.48.182","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f705ee37e52a62be8ecf6f50c5d32ac6","sha1":"da5a97557fda47095b7a18285dceef8170389b9c","sha256":"b1a52f591d0c254bcc0f5f869db403c99c0abbb4df480f2567004e314be9a297","sha512":"bae0ac6fc6c6848c9807abcfe67e0f28c69d8c1470f1cadef5220baf308bac8d0cbc6b8709dcb3f62f2b4497bccbff86596de51216b0132a2ed1439f3d750485","ssdeep":"","tlshash":"78d0a7111d4426b2075aa3520d97da81cf757474ee8244d1c9e902047615f6ee735c31","size":242,"data":"","first_seen":"2026-01-23T12:44:27.817722Z","last_seen":"2026-01-23T12:44:27.817722Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.wssrvip.vip/static/js/main.84f0e826.js","fqdn":"usdc.wssrvip.vip","domain":"wssrvip.vip","tld":"vip"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89683ce56b3f9aaea9a3a5693c8428b9","sha1":"b7cad5423611d901967f030b058fc08fe4766259","sha256":"22bf7757c698fe80f32f3a8279bc0b848daac5a2e90efe85f4e2f981b4b0b127","sha512":"86f0397f4c8e32f6194157da1b2b807e3e6d24eb85883188667f02c41d70f8ec4f8119c150ef660d3b2da894dc478904a378f2285101553b3e7393de95a9f5aa","ssdeep":"49152:q10U/26WKKtfWui0UNpvor+5R8IvUdn5CtEbqllUWNNWHlPRJD/TPUWOSM3tjhHe:enKUq","tlshash":"b6e55c9c7245b0a146a751e548bf140fb3366908a40ec4a4f2b9d8de39bd94eb237f3d","size":3113080,"data":"","first_seen":"2026-01-23T12:26:16.964164Z","last_seen":"2026-03-09T00:38:09.507569Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.wssrvip.vip/","fqdn":"usdc.wssrvip.vip","domain":"wssrvip.vip","tld":"vip"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcbe5e9e0d8d0bcff72863fa182fc6fe","sha1":"0759a4eb3f48c0ffd94166b58f63316e5e2c8da1","sha256":"b4e1115512748cc77d9816178c0d48098a9dbcd058312529a6568df657a8e27a","sha512":"5c3267a58f1ddc816404655a835b0baeecedee43927a371f6fc755662fcc03145bbc66aff7ee92b23a4749eab0521a505dca5a586a6abb9019e2f93d76821299","ssdeep":"","tlshash":"2411164b580934d13fd422552eeb770de2755411e952f56bf4f7e450386685e910ac4c","size":912,"data":"","first_seen":"2026-01-23T12:26:16.962208Z","last_seen":"2026-03-10T23:08:06.018227Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"usdc.wssrvip.vip/static/js/main.84f0e826.js","fqdn":"usdc.wssrvip.vip","domain":"wssrvip.vip","tld":"vip"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc.wssrvip.vip/","date":"2026-01-23T12:44:03.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.wssrvip.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:56:51 GMT","end":"Tue, 14 Apr 2026 15:56:50 GMT"},"fingerprint":{"sha1":"17:37:AC:07:CD:22:37:62:6C:D5:A1:3C:32:E2:5D:98:A7:32:8F:1C","sha256":"51:52:20:C8:B2:0E:FB:6E:D4:C7:8F:17:18:F4:59:A5:82:4A:C4:05:F3:9D:22:60:8A:E2:E4:08:C7:37:65:23"}}},"request":{"raw":"GET /static/js/main.84f0e826.js HTTP/1.1\r\nHost: usdc.wssrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.wssrvip.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 23 Jan 2026 12:44:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 Jan 2026 16:15:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6970fba5-2f8078\"\r\nexpires: Sat, 24 Jan 2026 00:44:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3113080,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"92a3a5799e20d1d6fefde60de40cfbb3","sha1":"a2463078c2bde6b8883d351e5f9c84f2aaea944f","sha256":"ef60253ccba8a0ab4808e8d10dde350ced33f09a5b49ca3982b86358e57173a3","sha512":"d146a4eb995ff742fe2c7e673d95ed8d6e466c7df5a5a6f46652235003cf21b00aa714a32f4dc345427edf6bf8dc3e4528297e4a79b665dfad0eda64242898ce","ssdeep":"12288:q10UXXrh+Zy/14abQVewIKtXPWu1dEeXUV2wFCEpGk:q10UXv/26WKKtXPWui0UNpd","tlshash":"c4254ad87685f06153a351f6407f080bb33a2919a80e8960f275e4de7cb954ea27bf3d","first_seen":"2026-01-23T12:26:16.949425Z","last_seen":"2026-03-09T00:38:09.487458Z","times_seen":6,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc.wssrvip.vip/static/css/main.a005ce12.css","fqdn":"usdc.wssrvip.vip","domain":"wssrvip.vip","tld":"vip"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc.wssrvip.vip/","date":"2026-01-23T12:44:03.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.wssrvip.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:56:51 GMT","end":"Tue, 14 Apr 2026 15:56:50 GMT"},"fingerprint":{"sha1":"17:37:AC:07:CD:22:37:62:6C:D5:A1:3C:32:E2:5D:98:A7:32:8F:1C","sha256":"51:52:20:C8:B2:0E:FB:6E:D4:C7:8F:17:18:F4:59:A5:82:4A:C4:05:F3:9D:22:60:8A:E2:E4:08:C7:37:65:23"}}},"request":{"raw":"GET /static/css/main.a005ce12.css HTTP/1.1\r\nHost: usdc.wssrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.wssrvip.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 23 Jan 2026 12:44:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 Jan 2026 16:15:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6970fba5-85c6\"\r\nexpires: Sat, 24 Jan 2026 00:44:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34246,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (34201)","md5":"d8da02f78df0de0c82dc99aeb1d0e25e","sha1":"ab0c1bcaa3ab0bbcbb6864f8d918b729ea9a5476","sha256":"3ff9127c195a4c97e4cf12b91abcf105ee177da0b5fc9ce6da9dad565a0c3e71","sha512":"ea9a102dbe77c7a462f6e0c1021437bf8bb5aef83de5dd9358f628fd308eb6821a83853fd9cbe33ce1084b4514d63198f502416eda874e4e04a84edcf9697df5","ssdeep":"768:S9Gf2SeyVrCai8PX8sl1Ff9ftl+Wwp74s23:SMf2SCO71PfvP","tlshash":"78f273117714253ef56fc59494d2a6dab014eb41c1bb92ffea226239c6ca3d31bb1b0c","first_seen":"2026-01-23T12:26:16.947018Z","last_seen":"2026-03-09T00:38:09.484716Z","times_seen":6,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kfvip.dlyunkefu.com/Web/js/mivisit.js?_=t","fqdn":"kfvip.dlyunkefu.com","domain":"dlyunkefu.com","tld":"com"},"ip":{"addr":"47.246.48.182","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc.wssrvip.vip/","date":"2026-01-23T12:44:03.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kfvip.dlyunkefu.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Nov 2025 00:00:00 GMT","end":"Mon, 16 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A3:B8:20:AE:1F:86:FF:23:FF:40:F1:B9:8E:73:92:80:28:2C:FE:F9","sha256":"7B:06:33:6C:A3:65:DB:46:0E:E1:2F:59:38:A4:64:34:AF:D2:C0:6B:EE:22:62:FF:26:DA:3C:FD:3C:D9:CC:B7"}}},"request":{"raw":"GET /Web/js/mivisit.js?_=t HTTP/1.1\r\nHost: kfvip.dlyunkefu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.wssrvip.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: application/javascript\r\nContent-Length: 64410\r\nConnection: keep-alive\r\nDate: Fri, 23 Jan 2026 12:24:46 GMT\r\nAccept-Ranges: bytes\r\nX-Powered-By: ASP.NET\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 25 Nov 2025 05:16:18 GMT\r\nContent-Encoding: gzip\r\nVia: ens-cache37.l2de4[372,371,200-0,H], ens-cache4.l2de4[373,0], ens-cache3.nl3[0,0,200-0,H], ens-cache6.nl3[2,0]\r\nAge: 1156\r\nAli-Swift-Global-Savetime: 1769171087\r\nX-Cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nX-Swift-SaveTime: Fri, 23 Jan 2026 12:24:47 GMT\r\nX-Swift-CacheTime: 3600\r\nTiming-Allow-Origin: *\r\nEagleId: 2ff6309a17691722438078359e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":273035,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65339), with no line terminators","md5":"fb7ca16b201446a5c124023ebefb0313","sha1":"a62e2876cc2e5bd35df6d4fd540a7e1745581b48","sha256":"5a1cbff45f72e753309f924736d1ab7d1dc1526ad46df28a1efa7ac513c65842","sha512":"8080a0e90b347966d922a82fd2499b440644651396ffe887699b95418ed1696e2ef216c21aa5dec0e1a6f90f16e16200028e78b80372e32fd3e1c3ec0016d358","ssdeep":"1536:7YO1FBWy+n3m4+wK4hDkgUkHQuj9LR+PiVWkdknlkltNYHT3IzzbtDqqk+6YsQeQ:8BR+N4hz1FVWkdknVDqhCQeQ","tlshash":"e24401e653e52ebd5d739614bd3b788cd8fd2cd50a8b904ea223b848ca7d5c143a1339","first_seen":"2025-12-07T15:04:07.748224Z","last_seen":"2026-03-28T18:24:47.504401Z","times_seen":21,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":170,"dns":1,"connect":28,"send":0,"wait":29,"receive":26,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kfvip.dlyunkefu.com/api/visit?act=init\u0026cptid=1e111567091f85173a\u0026device=0\u0026lng=en\u0026page=https%3A%2F%2Fusdc.wssrvip.vip%2F\u0026callback=jsonp17691722438990","fqdn":"kfvip.dlyunkefu.com","domain":"dlyunkefu.com","tld":"com"},"ip":{"addr":"47.246.48.182","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc.wssrvip.vip/","date":"2026-01-23T12:44:03.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kfvip.dlyunkefu.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Nov 2025 00:00:00 GMT","end":"Mon, 16 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A3:B8:20:AE:1F:86:FF:23:FF:40:F1:B9:8E:73:92:80:28:2C:FE:F9","sha256":"7B:06:33:6C:A3:65:DB:46:0E:E1:2F:59:38:A4:64:34:AF:D2:C0:6B:EE:22:62:FF:26:DA:3C:FD:3C:D9:CC:B7"}}},"request":{"raw":"GET /api/visit?act=init\u0026cptid=1e111567091f85173a\u0026device=0\u0026lng=en\u0026page=https%3A%2F%2Fusdc.wssrvip.vip%2F\u0026callback=jsonp17691722438990 HTTP/1.1\r\nHost: kfvip.dlyunkefu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.wssrvip.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: application/x-javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Fri, 23 Jan 2026 12:44:04 GMT\r\nVary: Accept-Encoding\r\nX-Powered-By: ASP.NET\r\nSet-Cookie: SERVERID=cda147b4721cf6298b6f3d38e6bd75e1|1769172244|1769172244;Path=/\r\nContent-Encoding: gzip\r\nVia: ens-cache29.l2hk12[8,0], ens-cache6.nl3[224,0]\r\nTiming-Allow-Origin: *\r\nEagleId: 2ff6309a17691722439178466e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":951,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"ASCII text, with very long lines (951), with no line terminators","md5":"7fa0c88c02fbf4f139684775f1ec5109","sha1":"4739d742d7fc0727942e067c99b25309b7b7ddab","sha256":"e0ff6d8804886791ea512d5b45cf1ccaef17e3b0b219666a947caf6017c6c29e","sha512":"ecf6d85b7f58ede8374539d3c029210a63197782c844efc9b03d88248f2c6a368114fc6ad5b0d6e59bc976391f545abbc7634767733c9460901cc2475c704162","ssdeep":"","tlshash":"5d1190084efb7a114b1ed2526c5fa58d846d3952eec40a70c77d481466c4a07b37554b","first_seen":"2026-01-23T12:44:27.811481Z","last_seen":"2026-01-23T12:44:27.811481Z","times_seen":1,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.wssrvip.vip/logo.png","fqdn":"usdc.wssrvip.vip","domain":"wssrvip.vip","tld":"vip"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.wssrvip.vip/","date":"2026-01-23T12:44:05.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.wssrvip.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:56:51 GMT","end":"Tue, 14 Apr 2026 15:56:50 GMT"},"fingerprint":{"sha1":"17:37:AC:07:CD:22:37:62:6C:D5:A1:3C:32:E2:5D:98:A7:32:8F:1C","sha256":"51:52:20:C8:B2:0E:FB:6E:D4:C7:8F:17:18:F4:59:A5:82:4A:C4:05:F3:9D:22:60:8A:E2:E4:08:C7:37:65:23"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: usdc.wssrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.wssrvip.vip/\r\nCookie: VID_1e111567091f85173a=4725655603482617714; VP_1e111567091f85173a=1; VT_1e111567091f85173a=1; SID_1e111567091f85173a=5519436044952177002; AVID_159011=4725655603482617714\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 23 Jan 2026 12:44:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jan 2026 16:15:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6970fba5-aba\"\r\nexpires: Sun, 22 Feb 2026 12:44:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"4f85a188ac43792a058b7a9286e6261a","sha1":"dfe981ecc604666b320ed3ba7f6fde1dbe6822a3","sha256":"e59bed09005751a5e20f52ff26011d659689cb3b0cd6faaf03d6ac224c586e68","sha512":"dba1b93b02910d2c6ffe678bfd77c79dea9999c84b0b27df4ec8b29f35b21814469858e67ad01c99532610126740e1ab95575481e7cf0dab66953504ae5aee4f","ssdeep":"","tlshash":"d8514cd4321fcf41ed7234d3a02291b4f82925c6f43a67a44db75d461c4bfe091f0658","first_seen":"2026-01-23T12:26:16.942125Z","last_seen":"2026-07-29T16:43:34.752484Z","times_seen":15,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc.wssrvip.vip/","fqdn":"usdc.wssrvip.vip","domain":"wssrvip.vip","tld":"vip"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-23T12:44:02.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.wssrvip.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:56:51 GMT","end":"Tue, 14 Apr 2026 15:56:50 GMT"},"fingerprint":{"sha1":"17:37:AC:07:CD:22:37:62:6C:D5:A1:3C:32:E2:5D:98:A7:32:8F:1C","sha256":"51:52:20:C8:B2:0E:FB:6E:D4:C7:8F:17:18:F4:59:A5:82:4A:C4:05:F3:9D:22:60:8A:E2:E4:08:C7:37:65:23"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdc.wssrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 23 Jan 2026 12:44:02 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 21 Jan 2026 16:15:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6970fba5-60a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1546,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1520), with no line terminators","md5":"f61e21965da586448079f8433cd3d006","sha1":"012e0607b25f5f38297b1debe9999ece88f42dac","sha256":"172746fcb72af2ab004d23599f15f85d354b70a9a2074a20c87750c3dea29e47","sha512":"f88455582ada44ea0bf169efaf9227321991571cf1df0f2015784bfb15087a64060676f1240d1d014c8556a7e7cde8171b0a264b9e79337894ac4920870f7935","ssdeep":"","tlshash":"3e3174478c0598c97bb013b57df3f70dd5697414ad42fc6ab8e2a4a028a5f8ec91a848","first_seen":"2026-01-23T12:26:16.944658Z","last_seen":"2026-03-09T00:38:09.483034Z","times_seen":6,"resource_available":false,"data":null}},"time_used":888,"timings":{"blocked":366,"dns":45,"connect":156,"send":0,"wait":156,"receive":0,"ssl":161},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kfvip.dlyunkefu.com/api/visit?act=start\u0026accountid=159011\u0026visitorid=4725655603482617714\u0026device=0\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026page=https%3A%2F%2Fusdc.wssrvip.vip%2F\u0026pagetitle=CIRCLE\u0026lng=en\u0026color=24\u0026screen=1280*1024\u0026timezone=0\u0026visittimes=0\u0026cseqid=1000000000\u0026cptid=1e111567091f85173a\u0026callback=jsonp17691722441591","fqdn":"kfvip.dlyunkefu.com","domain":"dlyunkefu.com","tld":"com"},"ip":{"addr":"47.246.48.182","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc.wssrvip.vip/","date":"2026-01-23T12:44:04.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kfvip.dlyunkefu.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Nov 2025 00:00:00 GMT","end":"Mon, 16 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A3:B8:20:AE:1F:86:FF:23:FF:40:F1:B9:8E:73:92:80:28:2C:FE:F9","sha256":"7B:06:33:6C:A3:65:DB:46:0E:E1:2F:59:38:A4:64:34:AF:D2:C0:6B:EE:22:62:FF:26:DA:3C:FD:3C:D9:CC:B7"}}},"request":{"raw":"GET /api/visit?act=start\u0026accountid=159011\u0026visitorid=4725655603482617714\u0026device=0\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026page=https%3A%2F%2Fusdc.wssrvip.vip%2F\u0026pagetitle=CIRCLE\u0026lng=en\u0026color=24\u0026screen=1280*1024\u0026timezone=0\u0026visittimes=0\u0026cseqid=1000000000\u0026cptid=1e111567091f85173a\u0026callback=jsonp17691722441591 HTTP/1.1\r\nHost: kfvip.dlyunkefu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.wssrvip.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: application/x-javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Fri, 23 Jan 2026 12:44:04 GMT\r\nVary: Accept-Encoding\r\nX-Powered-By: ASP.NET\r\nSet-Cookie: SERVERID=a59c87f00f33dbed70c8bc80ad394f34|1769172244|1769172244;Path=/\r\nContent-Encoding: gzip\r\nVia: ens-cache29.l2hk12[17,0], ens-cache6.nl3[233,0]\r\nTiming-Allow-Origin: *\r\nEagleId: 2ff6309a17691722441778832e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":242,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f705ee37e52a62be8ecf6f50c5d32ac6","sha1":"da5a97557fda47095b7a18285dceef8170389b9c","sha256":"b1a52f591d0c254bcc0f5f869db403c99c0abbb4df480f2567004e314be9a297","sha512":"bae0ac6fc6c6848c9807abcfe67e0f28c69d8c1470f1cadef5220baf308bac8d0cbc6b8709dcb3f62f2b4497bccbff86596de51216b0132a2ed1439f3d750485","ssdeep":"","tlshash":"78d0a7111d4426b2075aa3520d97da81cf757474ee8244d1c9e902047615f6ee735c31","first_seen":"2026-01-23T12:44:27.817722Z","last_seen":"2026-01-23T12:44:27.817722Z","times_seen":1,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdkqybhkbstatic-1.tos-accelerate.volces.com/Web/images/float/desktop/offline0.png","fqdn":"mdkqybhkbstatic-1.tos-accelerate.volces.com","domain":"volces.com","tld":"com"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.wssrvip.vip/","date":"2026-01-23T12:44:04.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tos-accelerate.volces.com","organization":"北京火山引擎科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Feb 2025 05:26:01 GMT","end":"Wed, 11 Mar 2026 05:26:00 GMT"},"fingerprint":{"sha1":"86:0F:E7:EE:E2:6E:FE:4F:57:2E:8D:3C:E2:D9:A0:18:F4:4E:ED:76","sha256":"47:A8:66:9F:B9:22:12:AA:AF:EC:5A:3A:93:9D:61:E4:58:C5:71:8E:E9:2F:9E:DD:31:C3:D2:DA:FF:A6:8E:B3"}}},"request":{"raw":"GET /Web/images/float/desktop/offline0.png HTTP/1.1\r\nHost: mdkqybhkbstatic-1.tos-accelerate.volces.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.wssrvip.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: volc-dcdn\r\nContent-Type: image/png\r\nContent-Length: 1377\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nDate: Fri, 23 Jan 2026 12:44:05 GMT\r\nETag: \"ebacd5a97a43f5901b2658ea61156bab\"\r\nLast-Modified: Wed, 20 Aug 2025 16:17:04 GMT\r\nx-tos-create-time: Wed, 20 Aug 2025 16:17:04 GMT\r\nx-tos-hash-crc64ecma: 12733998720094314734\r\nx-tos-id-2: 421a01736d15564469736d15-b7ce76e-1vjGWD-GO-ch-tos-1az-front-aza-1\r\nx-tos-request-id: 421a01736d15564469736d15-b7ce76e-1vjGWD-GO-ch-tos-1az-front-aza-1\r\nx-tos-server-time: 3\r\nx-tos-storage-class: STANDARD\r\nvia: n104-166-141-012.bdcdn-defra02.ToB\r\nx-request-ip: 91.90.42.154\r\nx-tt-trace-tag: id=5\r\nx-dsa-trace-id: 1769172244d9fe4a34cb99956ae3027e86472b8f97\r\nX-Dsa-Origin-Status: 200\r\nserver-timing: cdn-cache;desc=MISS, origin;dur=711, edge;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1377,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced","md5":"ebacd5a97a43f5901b2658ea61156bab","sha1":"233b0aeff619a4dee456175540c3deb3237a572d","sha256":"7ebffde0bf0aef93720cd95a78e7276b105a97a670f50033a67f3e177888377a","sha512":"c86b8a353e3fde1f71b21a9c9585010b324dc62918b34447af7baca20b8b19448327f0d428c42e59881d3ea00d91a00c261ee19dffed8b0939921829a0ce8587","ssdeep":"","tlshash":"6621a80855415c409b4deec62ce7511bec1388c0bbe1f4a5bd9fdc0768a1278a51e6ea","first_seen":"2023-06-16T22:45:21Z","last_seen":"2026-01-23T12:44:27.81904Z","times_seen":12,"resource_available":false,"data":null}},"time_used":979,"timings":{"blocked":120,"dns":1,"connect":26,"send":0,"wait":738,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.wssrvip.vip/static/media/airdrop-banner.c80fa4b1b6b5d828d0b9.png","fqdn":"usdc.wssrvip.vip","domain":"wssrvip.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.wssrvip.vip/","date":"2026-01-23T12:44:05.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.wssrvip.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:56:51 GMT","end":"Tue, 14 Apr 2026 15:56:50 GMT"},"fingerprint":{"sha1":"17:37:AC:07:CD:22:37:62:6C:D5:A1:3C:32:E2:5D:98:A7:32:8F:1C","sha256":"51:52:20:C8:B2:0E:FB:6E:D4:C7:8F:17:18:F4:59:A5:82:4A:C4:05:F3:9D:22:60:8A:E2:E4:08:C7:37:65:23"}}},"request":{"raw":"GET /static/media/airdrop-banner.c80fa4b1b6b5d828d0b9.png HTTP/1.1\r\nHost: usdc.wssrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.wssrvip.vip/\r\nCookie: VID_1e111567091f85173a=4725655603482617714; VP_1e111567091f85173a=1; VT_1e111567091f85173a=1; SID_1e111567091f85173a=5519436044952177002; AVID_159011=4725655603482617714\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T11:51:55.447338Z","times_seen":17886037,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"houtai.ssse.top/api/getAirdropStatus","fqdn":"houtai.ssse.top","domain":"ssse.top","tld":"top"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc.wssrvip.vip/","date":"2026-01-23T12:44:05.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"houtai.wssrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:56:10 GMT","end":"Tue, 14 Apr 2026 15:56:09 GMT"},"fingerprint":{"sha1":"F3:4F:B9:F7:8D:8A:AF:9A:44:FE:1C:2F:F3:F0:3A:68:E2:75:62:6E","sha256":"5C:4F:F6:CE:94:7D:2A:0F:EC:A6:1F:3F:6D:9B:E8:06:F4:1B:E8:5F:D8:2A:A9:BE:9D:0F:21:A6:D4:54:C9:23"}}},"request":{"raw":"GET /api/getAirdropStatus HTTP/1.1\r\nHost: houtai.ssse.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdc.wssrvip.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.wssrvip.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 23 Jan 2026 12:44:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nset-cookie: PHPSESSID=juv0pmvdmbnin6cnkv0fonueuo; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":67,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4136d06703a092b1e310e07cd79da252","sha1":"1d48f6d7c527790b20a69219f38f2b46e070f2e9","sha256":"6dc4efc87269312b371adc65a1f5c25c7464989b7ed3e9a38ba387b5c7e63d19","sha512":"6d4b1cb51c281ecd130b0b7216959d842629308f3fa2698a66bf3e9a12927cbe270c240d472ba63f189b3bb661218594f7635785ee4144d50dd02b7a011f1204","ssdeep":"","tlshash":"98a002ef175a586246c780d9dd4e870cc4652b911861e23a5cfc095c19143c1e784515","first_seen":"2026-01-23T12:26:16.954235Z","last_seen":"2026-01-23T12:44:27.82016Z","times_seen":4,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":317,"dns":1,"connect":153,"send":0,"wait":174,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.wssrvip.vip/static/media/airdrop-banner.c80fa4b1b6b5d828d0b9.png","fqdn":"usdc.wssrvip.vip","domain":"wssrvip.vip","tld":"vip"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.wssrvip.vip/","date":"2026-01-23T12:44:05.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.wssrvip.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 15:56:51 GMT","end":"Tue, 14 Apr 2026 15:56:50 GMT"},"fingerprint":{"sha1":"17:37:AC:07:CD:22:37:62:6C:D5:A1:3C:32:E2:5D:98:A7:32:8F:1C","sha256":"51:52:20:C8:B2:0E:FB:6E:D4:C7:8F:17:18:F4:59:A5:82:4A:C4:05:F3:9D:22:60:8A:E2:E4:08:C7:37:65:23"}}},"request":{"raw":"GET /static/media/airdrop-banner.c80fa4b1b6b5d828d0b9.png HTTP/1.1\r\nHost: usdc.wssrvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.wssrvip.vip/\r\nCookie: VID_1e111567091f85173a=4725655603482617714; VP_1e111567091f85173a=1; VT_1e111567091f85173a=1; SID_1e111567091f85173a=5519436044952177002; AVID_159011=4725655603482617714\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 23 Jan 2026 12:44:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jan 2026 16:15:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6970fba5-5ad1\"\r\nexpires: Sun, 22 Feb 2026 12:44:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23249,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 313, 8-bit colormap, non-interlaced","md5":"5d82fc2f2c6e11fa5154df6c036e74a6","sha1":"164365857484f3570ca4f434eca66ddd9b41ad46","sha256":"846449787b27c5fbd950ac680024ef95e4def49fcaddd02207346f2747d3153a","sha512":"b1680f7e055a413ea9988652c9401b0f14f37c675d1d9997099ff9f537c13ad1a0c1382158afe497985265df12fd03ec515834cffd9f08a810bff2a6fdf92195","ssdeep":"384:YiBAPU8StYntjkH84MhrCLVZfECo+iMprePtcCXtAbcMhFfVmLRLJw8/oipyowvz:qU8qYntjy8bhrCpZfEQi/cC97+fOLJ9c","tlshash":"e7a2d00e2d764d383b504248a07453424fe628fcea3666ae95e03b77add94d4d1f1a3f","first_seen":"2026-01-23T12:26:16.952008Z","last_seen":"2026-03-10T23:08:06.002768Z","times_seen":10,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"usdc.wssrvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}