{"report_id":"186eae3e-4871-4b29-ab62-bd2fde1176e0","version":0,"status":"done","tags":[],"date":"2026-07-29T13:01:48Z","url":{"schema":"http","addr":"tiktokhkg.cc/buyer","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/#/","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"title":"好貨賣全球 TK購物官方網站","dom":{"size":151643,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33468)","md5":"16c3db0fa3a78c050f940b95ca7f66db","sha1":"f335147c2d59b06f9de490517ac0141e409c484a","sha256":"1b4973249a0ea7ecbbc7338d1af4f9188ab3cf5a9e7b47be761f610f5f7206be","sha512":"89515046fcc613a79f61bed2a2abd9cfcda410de5427a2287100cbb06d8c473c27cfccf32641626458748062bc19cdefff6a8aa58e77b553fb37e6384c137efd","ssdeep":"1536:t/waXKJddnjddnQY7KrUsZAi6BsX/r7FpubCyC1wzCogM8BIGkwNC2sDM9gH29Ug:6aszQ6KrUsZe6Pr7uuyCs6bYs","tlshash":"eee3e770c658623b02278dd8b0719f0eb5e7d30dca9b9905a7fc57cd5fead90ea09086","dom_hash":"domhash343626ca019ce11567b936a05085bd66","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tiktokhkg.cc/buyer","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-02T13:01:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"admin.tiktokhkg.cc","ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"2026-06-26","domain_rank":0,"first_seen":"2026-07-29T12:57:01.522965Z","last_seen":"2026-07-29T12:57:01.522965Z","alert_count":90,"request_count":45,"received_data":33252729,"sent_data":24013,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"admi-server.s3.amazonaws.com","ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-03-26T17:30:42.373493Z","last_seen":"2026-07-29T00:00:35.631752Z","alert_count":0,"request_count":22,"received_data":4825921,"sent_data":13112,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"mall-test.s3.amazonaws.com","ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2024-08-11T22:28:16Z","last_seen":"2026-07-29T06:15:06.154893Z","alert_count":0,"request_count":26,"received_data":3293931,"sent_data":15169,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"tiktokhkg.cc","ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"2026-06-26","domain_rank":0,"first_seen":"2026-07-29T12:57:01.524514Z","last_seen":"2026-07-29T12:57:01.524514Z","alert_count":110,"request_count":55,"received_data":20365414,"sent_data":27553,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"44e6c9ee96a57e655039cdf81ea37df1","sha1":"2a7751ec0501e03b726658c7cb46140d58bb593a","sha256":"d80ab0e3fc2b40f89d4cf3cc0287142f5b2eff4543fc8d5129e6e9139929b339","sha512":"6437b7a4893e2bbb385d219457ce01ed31be96c297667fecdb780683847d9860cd74badcb615e06bf7664d86c28fdcc8017e3afd2bcb695b24fbc57e8fdb89ad","ssdeep":"","tlshash":"0d80002a0a0800f82aa00080aa23be203ba208220a2f0380f2c0000a3c8a02302c88fa","size":32,"data":"","first_seen":"2026-07-29T12:57:29.877275Z","last_seen":"2026-07-29T16:17:10.985667Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"51d1db5346b567fcbf89552ca7d02d50","sha1":"1de0d00de736745e8e3b2c7d8bcf57265ad940d1","sha256":"a0e027cf40b1430107df16ff9228392551b7f8b61bcb64e2b51475d9422b09d9","sha512":"074a3530c1440f52b4a2726c0c9cb3040bc0e4565ac1a1cb390867b9e6f42aa3774d13a33cac43861a5a0761bf5ff210ed43dbcd0eddad3ada38077042ff6bcb","ssdeep":"","tlshash":"6b21eb7e0640bb324b9b4292884d74846d730163881ac760790cc5051fd0b3b8ff2ae9","size":1134,"data":"","first_seen":"2026-07-29T12:57:29.88157Z","last_seen":"2026-07-29T16:17:10.986135Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/crossDeviceRoutes.browser.js?v=Mon%20Jul%2027%202026%2023:36:34%20GMT+0800%20(%E4%B8%AD%E5%9B%BD%E6%A0%87%E5%87%86%E6%97%B6%E9%97%B4)","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"59956e0a0409c13b091ce4dacb62bcf9","sha1":"c794305599ba425006802e40bb11b87ec9941976","sha256":"9ef2b4b4357a25036c45a059ff71b9446ab5de27ebf728dd9e8eed09156eca8e","sha512":"6ea75745b77e3e6533ebdad25ad15516fcf486a3b33b565414cf816f5f78be50e9aa23f8da898342da95563d02dfed6cc2f4a19d73ee891e54edb6dcd90e02a2","ssdeep":"","tlshash":"76710fd499a6a1465a73e36e8d6f888cfab606b31165c104f8bc91342ff4d08437afe4","size":3677,"data":"","first_seen":"2026-07-29T12:57:29.730081Z","last_seen":"2026-07-29T16:17:10.920984Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/lang-en.500a0506.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"6483e2aa96ae5f52ab44921a5237c171","sha1":"e6cb69e98cb0b6fe84271b6090827580f865f127","sha256":"7c1f9f76719a4a5096e1857d416270fbbc255a37f8f4a59c2f0bab5255988759","sha512":"5a575883f95457e81d89b0297e897e7887a77fac49223bda7beb41db143b24ea3d7d9e085921c0c79734b8cd7c7576d570c8754f94c18fbaa19b53df7520e7ce","ssdeep":"768:+511D8GAF5Htr5GOdf3tntBLW8qXS1HHE8auTWN:+D1D8F5NrYaBLqXS1HH0","tlshash":"50032c8df3561bba0d938316788f2be115d504d5e7a5096894dc803923eadeaf3f7388","size":39163,"data":"","first_seen":"2026-07-29T12:57:29.40283Z","last_seen":"2026-07-29T16:17:10.973685Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-200df844.1af3588a.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"edf5db24f943debdaf7eb47b2558f0fc","sha1":"2bae4934e9f0f8fbd3923452363ae3d7692438e1","sha256":"3c3e2ece4da7b0095ebe8a6e40cdbfd049592efe118ba654fe19da341fd7a47c","sha512":"f8c4025e61ec0e7e6666462f2f8037c2847800c030a9f8dd12e31428134716596335f056743858da62e7cea857a53a72779ef867dbf8d33443c4753e730258f9","ssdeep":"384:SHA3S/0oWvknwOZ/6et9g2bsc0s/edP1/RHKoV5U0KsEFE:4A3+0TknHZ/c6qZq2U0yE","tlshash":"e9c229d9f5b0b07c45ab9163141b9095f3353e48a5279488f378e8ea7aa8518233ff3d","size":27614,"data":"","first_seen":"2026-07-29T12:57:29.714266Z","last_seen":"2026-07-29T16:17:10.91487Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-75cc1552.dddc4fdb.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"03490b25f0eca569957ecdad87915feb","sha1":"1eaf6e906eed1fbf928fa7846e89f39393c75a9b","sha256":"c93a599836fd651ca196292e9acab266999466c381cf453c01d6203e7192c7a3","sha512":"283a7248426c431b243e72f15e15aa07516b5dcaddeb9cb1da2b312c7718e686c433de4a035bfe5f5856e9aaeb1a9fe668e20c18ff19641baade988850e82acc","ssdeep":"192:r1Ds60CMSXc6S1HDy0glLrR4icrAPZSCuvTL1LZkkCb:rJs7KXjSJ6RrRcrWSX9ikO","tlshash":"8112185ab47aa5f88dab4012200a723474351fd1f80895d9b2fc9cb86589ebc332f37d","size":9180,"data":"","first_seen":"2026-07-29T12:57:29.627252Z","last_seen":"2026-07-29T16:17:10.92204Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-swiper.68ec9a3d.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"458ad65e063725d6050332e4e2c8da19","sha1":"0d72b9b3a8df8a718fdb30c4a6680b6dc10b7fb6","sha256":"1ca606418187efe4944c9a216f1542d8d0209e675cbaadb6a17f0582be78aded","sha512":"d409bbb3e07171f345f08f3eb8b013ebdf4ddd588c69f6d2b5fec9d172aff344eb8fd501e010c5a1b68e36389b2f3e4a2fe967dad1af142dd56d664bcf1dc8df","ssdeep":"3072:HGwZT8uq042rYVmTVRzaacqHOyrTYcTeGy4I6m6Rk:HGwZVq042rWmHzaacqHOyrTYcTeGy4IP","tlshash":"fac34b4a931075a241fb624a938cc651a3f25445b80ad5bc31b68c9bb97dc5c03feff9","size":129922,"data":"","first_seen":"2026-07-29T12:57:29.873866Z","last_seen":"2026-07-29T16:17:10.920486Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-vendors.f37ef52f.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"7343581661c2002c072a6ae20daef1a8","sha1":"138ff7af880da6be400e4e5a58d473d47578bf56","sha256":"9e535d623285af5bce8c0ed57e0e483020a4e8434a2e5f7b3b1e51f4ac137221","sha512":"7b89bdbf1808b4b90da7102482cb11d50675a49ffed7ac070ac58d65da05398700c67c79590e333088d964103375b93283467a772ac3190877b16d9fdde424b1","ssdeep":"12288:i0bMpqA4IzIb4vtwa5AYmfSbpxW2rW7ANj+IvZsdqkH1z1PPAf:i0bXnZ2y6oANSIvZsIWZPAf","tlshash":"2385b5182a5bf3549509c0d7f93b3c88d1ade18aa00b14d19f719bf31bb1746eaadd23","size":1799708,"data":"","first_seen":"2026-07-29T12:57:29.88726Z","last_seen":"2026-07-29T16:17:10.987144Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-77eec948.5c4becb0.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"097d8571188e63287939df74948ba7fa","sha1":"9b2cc5b5969075259696d5b130aa6fcb4159a9ff","sha256":"de067a868d80ac3867a9c2f2130440986e372c3a25eb0d6c0b3cab3cfb727385","sha512":"9e9684e7fd7a89013e922129b77af11a091c1c4688b51f86c2056e450a1caa41dcef5d8795449bd4dab30738eb2e1d8375c103191c2e588058f5462b0740572d","ssdeep":"384:WKisWsX9S8uLH63Vn69yoD5um6tr0M/MOzweSgepY8qOzh+O6alQSX9ikFOO:LN3P69yoDj6Z6KEh+PalQE9ikFOO","tlshash":"07c26c57a480bcbc8b632295380f2155bd662e85d845cc99753cdce8e1fbd21b30bbad","size":26490,"data":"","first_seen":"2026-07-29T12:57:29.766878Z","last_seen":"2026-07-29T16:17:10.92779Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-396affbe.c4dae239.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"200256b7052a0d4d8bfab1af960e5451","sha1":"e2eaf6cf5e39e51c7cbfe2d636c8d62883715937","sha256":"8e3687817f2e0b32f8ba8e57cae6a3323f570b0ff3bbd9e34550f62b26993141","sha512":"41496189826e6838e83cac6180b7edfd7c4f3bd262edb27cc02d26a8141f4d5201e73f47e30d58806e603f077b1bba69a4915bff58e147f5d7c788b3545d6a70","ssdeep":"384:nUMkgid9VACPyhjwefRHLU5iP4udCTOS02wFfV/GKk3604B2Qnb:nUZfVnsU5blO8wiJ36Znb","tlshash":"ff8209c935e1f05d12f624e004eb9483f23aaf06784d1876a240d1967c36ddaf2aff26","size":18950,"data":"","first_seen":"2026-07-29T12:57:29.715055Z","last_seen":"2026-07-29T16:17:10.978616Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-1051c767.c7812c46.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"1953e778d8f162f8375636c7ebc1d038","sha1":"89e14e152de68f35e7a7615f163fadc63df30453","sha256":"84162afff714647ace12479112c864a933e5a9d93229042e76f8a9350e54c3e3","sha512":"cc437472a05567d9e0382104fdf6733936e991cc152ba6bbc4dee1747c6241c099dc6eb9484a46a783cef33640e6ce0509d63a0c4a4d8afa9b7eea89119a6761","ssdeep":"384:4RXkGRgPJ8/cycOoVRTVuDrpGgZV2rpz2k5:4RyPJF/TVOpzZVKpZ","tlshash":"4b92e73a91417c4d0e239166702f3051e0098418b819df9af978ceeabbeed69361777f","size":19779,"data":"","first_seen":"2026-07-29T12:57:29.293217Z","last_seen":"2026-07-29T16:17:10.917471Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-e0b1cc06.4d8c6787.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"21830a2114c73335a49d790eaacc1cd4","sha1":"20911f95baf069e8c805fce775c0a43887da5de5","sha256":"d7c1b6be799a2897e11b79338d71b147ee6c2e521b155e805842d3c0fa042f21","sha512":"4b4d909839a352f43945d394cc1c012ccc262415fc5a77eb1adce931bb869fca12c7a0d7a7cf2ada3d7e6d1a7c823563e4ef415a8f285bf2879bc40e59a87263","ssdeep":"","tlshash":"3e51761d5082689c445ec326720ae75562b27fc790c0c8beb7789cd846d8da1531e77e","size":2450,"data":"","first_seen":"2026-07-29T12:57:29.675246Z","last_seen":"2026-07-29T16:17:10.907979Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-637414aa.ed6c9d2c.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf44271e549207b5ba23644b481a36ee","sha1":"d09479ab4f2359c5cfa8e91dfaaba05b94192dcc","sha256":"d165933b834f0b1d6809fb519dd4ca88c203d242cb335b20683b11f730b7a837","sha512":"9b04e53ae6ea427b7251e15c31360159953fe4a383d7dd07a4b0fce84b9154950c8333e0a537970d41387e5b13d44e1adc9a386f0d51804c61ed006905e7da6e","ssdeep":"","tlshash":"684185df94a7fcadeb9bb0022169103570213ec244468c953bf4ce6085d4d649f1ea9f","size":1940,"data":"","first_seen":"2024-11-12T14:47:34.644865Z","last_seen":"2026-07-29T16:17:10.959543Z","times_seen":423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/mobile-redirect.js?v=Mon%20Jul%2027%202026%2023:36:34%20GMT+0800%20(%E4%B8%AD%E5%9B%BD%E6%A0%87%E5%87%86%E6%97%B6%E9%97%B4)","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d863f2d78ce34fcaaf07aa57bbbc5c1","sha1":"21d01903c4c93e31e03692d4e05f83d74c05fa2c","sha256":"969ce691d676eade2023a5247747dd88dee03728ab6d192d6c147f9f994014d6","sha512":"6a639efe9f9996d355232ba615bfc5fb0b28cd78062459f3108086dc1de143985700f9a1d8c65f00127892a053670936ea16de217fdcc8faf9d409b95a1084b4","ssdeep":"","tlshash":"955173d929c27046157327789d1f6224fbb385bb052ba490756592203fb062bc77eecc","size":2892,"data":"","first_seen":"2026-07-29T12:57:29.626037Z","last_seen":"2026-07-29T16:17:10.955497Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/conf.js?v=Mon%20Jul%2027%202026%2023:36:34%20GMT+0800%20(%E4%B8%AD%E5%9B%BD%E6%A0%87%E5%87%86%E6%97%B6%E9%97%B4)","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"024c008b42f41c2f8e99f36e3550fe69","sha1":"72329a522f69b0fab9dbbfddee44413a93ea15f7","sha256":"ae7b7b1438f8604bde75fe540840e4649a735342593a1fd72a577633d9cf9ebd","sha512":"51a18844bf71e1dd7982df2c432fb1ab5033d62766148f1386c047431eb9a1347190e1dc5eb74064ba1716b688f40f23b61254d1ada50521469b828a4463a431","ssdeep":"","tlshash":"b921dd8f91f9900586b0465825b6e841d37a12aff0404d24fe3bbba03f3337534c2659","size":1133,"data":"","first_seen":"2026-07-29T12:57:29.864177Z","last_seen":"2026-07-29T16:17:10.983367Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-elementUI.b2d16944.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"7983f57d373e2c844e340e3e35391932","sha1":"31ef0dead16d8479ec6fef5362153c9bfc1ceecc","sha256":"973d4f9545e7439627fa05960299b6fd81149c36e34f69da2dbada307ae27133","sha512":"78bab2d610bebf6617d9ae460d54d8cd37f6699d9d71bb6145c0bd9abf85457491fbf0e442f5a3dd1e8b324841d2ac54cf484ebd916aa9c4fcf77dd3b5705903","ssdeep":"6144:QNiQfM33tUFytdodpylw/9TVyjsMi7gTgUubmZCOs8GsOIdjkHxKrdDt8NRHIn:QAeZIdodp8w/fNU+ODkHx02NRHIn","tlshash":"3bf41b8e72c1b47147a36070103f250bb33b2aad6809809cb675d8ea6d79d4d626ff7d","size":784482,"data":"","first_seen":"2026-07-29T12:57:29.74879Z","last_seen":"2026-07-29T16:17:10.914259Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-8ae1bef0.af61eafd.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bb78a0571736359830be69fe20228bc","sha1":"fde52299d4723649401eac2af4e530c7c0ec82c0","sha256":"b130cbd09ebf132fbd1971b0a5e4584d0b66e3f61f25ef8b53a3a58a473281db","sha512":"7bf6709faf859a95f62bee4a092ab23a1ca84a85555a37f16f6e9a9dd58fe9856984ab88469f9f0f9e8c0511202fc1d769d78f3093cefb19315c62088f7bfe8c","ssdeep":"96:vPqgYhUGrUjvZK6q9RnVJfNFotRjJfNFoqhb5hiIuJq:vSg7GotKd9RnLfNFaNfNF1","tlshash":"59c144ae10fdecd8d5eab111b09a17be62313bc6a5078cec727ccde84485e94831d979","size":5893,"data":"","first_seen":"2026-07-29T12:57:29.539428Z","last_seen":"2026-07-29T16:17:10.970812Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-5f202a38.558e9228.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d91d844d3eb5535c1f4ff0023b4064e","sha1":"88c72d5ab07c5dbd7d3f84ae62190bb4f2dda010","sha256":"4fbdb315bd2c1d49978d5290bf2b728ddafbc875adc7bef9e7d1debdf8896ba4","sha512":"75ec6f794b58fe4a8f96f303978bc95d94845444ffc13a153d7cdfc4be3eb7a8f044da4dfe842ba6d76ea3a92b47c92bc57c67b9b369b6ae7d0f33fd5fd7a381","ssdeep":"384:M6hs74XhSJ6pzDX7uD/3I+Xsv6XT7xEb/2rcDVbk7wY6QaSX9ikk:9x6izDSD/Pj+b/2rqVbk7wYSE9ikk","tlshash":"b0a2c786e072a8ad899b5221311db3b4b6702f94a440c559b93cedfc61a4da1333fb7c","size":21566,"data":"","first_seen":"2026-07-29T12:57:29.733973Z","last_seen":"2026-07-29T16:17:10.930593Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/site-head-bootstrap.js?v=Mon%20Jul%2027%202026%2023:36:34%20GMT+0800%20(%E4%B8%AD%E5%9B%BD%E6%A0%87%E5%87%86%E6%97%B6%E9%97%B4)","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc915759225871878edce33c4eb16a9a","sha1":"18420de9d29a29c0eb08d87a6ee3c612a5844eba","sha256":"aed7797617924f404ffc316647accd2903a78435a02d36458cab7c9037c305c2","sha512":"a7bb737afe533b0536126c10306143c3fa86bc3d3432e7b80b9bb8788a12d3c5b39b15be80de4a985689d8ab73821e538cc5fa695f1589898ee0e43a3c604ee8","ssdeep":"96:32ZBOUCeoD7/9hfXBS464ojdmfauXZi44Jigeo6CepMbuBKEH/QXRBj:QBNoD7/9hPBS6q8Xjab8/mRV","tlshash":"d5b174d9658228626633b339d8eba108fe33117398b2e510f56c90113f7594ad37bfe8","size":5542,"data":"","first_seen":"2026-07-29T12:57:29.522153Z","last_seen":"2026-07-29T16:17:10.902025Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/app.b1b632b5.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"2190ec56a8a9378e1d630c04f91f3f53","sha1":"457c8c57a2ad7a93640a930d7456f229ae40a2fc","sha256":"2622d1e2783b718a7cc0748cb0b8867d50056c734edc9587b44fc85296ff2577","sha512":"f76db13a807e4b55210ac68d03580ee161970e1cf073426ec5c7f8ebf66602f740f7ac000bf154fdf9e3c00a24159767ab60156325c518304415c561a44416ee","ssdeep":"12288:q6vHzP+ZxtLzT9HxPUZO23iYEK6xK5Q+4n69cEdswB97QcTFLRbAHFyrL3rqahQS:qAHzP+ZxtLzT9HxPUZO23ZkxK5Q+4n6d","tlshash":"ecd48dee26d3fbf805540782901b75b5229d1d7eff99b4e044e8ea5a31ec680c113f6a","size":649963,"data":"","first_seen":"2026-07-29T12:57:29.606964Z","last_seen":"2026-07-29T16:17:10.94102Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/css/app.0d55f464.css","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:12.902Z","timestamp":1785330072902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/css/app.0d55f464.css HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-3d23b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250427,"size_decoded":43263,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9b0a15f69066d5f576b3c5cdfd8c94a8","sha1":"ed46237c62d2c185de17956cbb7d6fa6f62e2c1f","sha256":"9e09c6eb465856a1d57404b61ab0e9acfac6876afc758e392b01e81b54971b33","sha512":"ac26adbeb55d502473c07b2d92d48cc1d972da976e951154180831ec70812d889104b71e827197c897ab5ef92ae3b49008fe8bc1a23951ca6aa58fdf5aab2de6","ssdeep":"1536:cgFGtw+9HtC28Y7SrW3YeWXA1u9w4HCe/l4RdgW9cMEcWAp7KO6iZkJgYu8e0r8z:WV/FJWTPL4Q+05q2pe","tlshash":"2d34b620db17213b222bd66db5c0ba896f18c322d8325b7bfd95741ccae75891163e1f","first_seen":"2026-07-29T12:57:29.603364Z","last_seen":"2026-07-29T16:17:10.947744Z","times_seen":4,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-8ae1bef0.af61eafd.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.340Z","timestamp":1785330075340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/js/chunk-8ae1bef0.af61eafd.js HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-1705\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5893,"size_decoded":2436,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5893), with no line terminators","md5":"2bb78a0571736359830be69fe20228bc","sha1":"fde52299d4723649401eac2af4e530c7c0ec82c0","sha256":"b130cbd09ebf132fbd1971b0a5e4584d0b66e3f61f25ef8b53a3a58a473281db","sha512":"7bf6709faf859a95f62bee4a092ab23a1ca84a85555a37f16f6e9a9dd58fe9856984ab88469f9f0f9e8c0511202fc1d769d78f3093cefb19315c62088f7bfe8c","ssdeep":"96:vPqgYhUGrUjvZK6q9RnVJfNFotRjJfNFoqhb5hiIuJq:vSg7GotKd9RnLfNFaNfNF1","tlshash":"59c144ae10fdecd8d5eab111b09a17be62313bc6a5078cec727ccde84485e94831d979","first_seen":"2026-07-29T12:57:29.539428Z","last_seen":"2026-07-29T16:17:10.970812Z","times_seen":4,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/f74fe70c9e7d4ac58e097de6497637b7.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.122Z","timestamp":1785330076122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/f74fe70c9e7d4ac58e097de6497637b7.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 22:00:11 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54135,"size_decoded":54662,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"9f3336716bd8008665bcb56702f775a5","sha1":"537f3e24dca3bd3cf48ada6f5f730bd897fb0b32","sha256":"35ee20a301266201db28ffba48ae656974c1c07a85a126b939b6813bfaa7bd54","sha512":"66c8f6acd77b9912b59bfcbb585a31a09a60b707e5a4f9a098d442d275744bbf4e2521fbb421b6c5b0b361e429e6f25f1c2ff74360c9163c5faf3e3ca29a1f73","ssdeep":"1536:0SGdj0vlkLUJutDZ5p2HswE6keWEuNf01ZUIm8aA9y:NW0vl+68D2HswEneWEuy1JC","tlshash":"183302a6a1df70cdd3d5ffdba1867ed8d57920e5c3e09065d4039a12a97e1b60023ce4","first_seen":"2026-07-29T12:57:29.405087Z","last_seen":"2026-07-29T16:17:10.96008Z","times_seen":4,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-23/dc620b54-b86c-44c1-a5f2-c1134f1a7d34.png","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.526Z","timestamp":1785330076526,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-23/dc620b54-b86c-44c1-a5f2-c1134f1a7d34.png HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: lzhhaRRA3C+8U9EfcEKWrPJLsDv+ZABun5PkSmbPXHIExghVV3XGPZ8W8ua9gHalKXSU1LNbGyUwuu00jzlDk9UBHUXperQA\r\nx-amz-request-id: G9PJWRFNG8EB9M2C\r\nDate: Wed, 29 Jul 2026 13:01:17 GMT\r\nLast-Modified: Wed, 23 Apr 2025 14:08:37 GMT\r\nETag: \"31bcbd7cb647712203e8522f94f16691\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 194948\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":194948,"size_decoded":195404,"mime_type":"image/png","magic":"PNG image data, 575 x 573, 8-bit/color RGBA, non-interlaced","md5":"31bcbd7cb647712203e8522f94f16691","sha1":"e3af9e313fccf660531d901aca798c2ee99ffeea","sha256":"5cd4da4eb175ae88723b4a61aea91a26d3f9cb2079c102cdfa9303aa9b82b9d2","sha512":"2b64be53543ee9b0fbc2483a2d585081d07313971b1590d8de78be70cca1f6cdfdbeb1c28dbbf80ba2fb060caa71aa969ba0fe17f77cc5093a3c975c9fea56db","ssdeep":"3072:pc/fUb34nEo4JQPZ9AigLmiKZ0m5D1gyTcHOjNVfQ0VA:e/fUDet4JQPZaigLmiKSWiyaOhuoA","tlshash":"c21412e2a80050a55ff071d530b45c9bbfab39c2a617366b192d941d638bf8c84c5fbb","first_seen":"2026-07-29T12:57:29.55007Z","last_seen":"2026-07-29T16:17:10.974719Z","times_seen":4,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":100,"send":0,"wait":149,"receive":297,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0861R1PQS/71Z9wHceZVL._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.538Z","timestamp":1785330076538,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0861R1PQS/71Z9wHceZVL._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: pCsvw8SQT4k/PRILnPc4XwvCMIeoKOulOhVaTM1IEalbC2Yv0pUOzTOZ78nTQVR59+qjJSBywBk=\r\nx-amz-request-id: 620Q61GSRQQNZA9R\r\nDate: Wed, 29 Jul 2026 13:01:23 GMT\r\nLast-Modified: Wed, 22 May 2024 03:07:47 GMT\r\nETag: \"b84c13a5de5c20a965efb76198026918\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 145849\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":145849,"size_decoded":146247,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"b84c13a5de5c20a965efb76198026918","sha1":"b8c5282e7baa2b2338cc3df95dfd6cfb46fc416c","sha256":"53c3202695eed7b37115ab1c010e9ceb48d7e98d7991d6a263ca7bb92b7bd5c3","sha512":"b8a60407b3e69a5dde55fde3f82ad6df9378f67f7d84adc505f658520c9f8e6515853429029fcc949e44cc78eb064f933d55bbca7b75dcc05a3818324f79aac1","ssdeep":"3072:hLKfxtW6ueCUaPZxpPyWE2Vi5tFqG1pf10hRaIqda/Y3oov:hLKzbZUXdonsG1pt0DLQa/YZ","tlshash":"2ce3224d13e3acc0f68d7b3df31ac9d61a37d46e652472b962e355c8b2481303579ae0","first_seen":"2026-07-29T12:57:29.666654Z","last_seen":"2026-07-29T16:17:10.933688Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7185,"timings":{"blocked":6319,"dns":0,"connect":0,"send":0,"wait":120,"receive":746,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B09Q6CMZL5/71SAWtj0QvL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.561Z","timestamp":1785330076561,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pachong/gaoqing/B09Q6CMZL5/71SAWtj0QvL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 0hfmLGy7eGxXqJBq+9TcJrqmYsOmuxhUnzke2ZoaTq8RRd77jTDRHKQ+FQ7fR8/KAkpSE1rq3Cc=\r\nx-amz-request-id: S72WBEGRF8S772Z2\r\nDate: Wed, 29 Jul 2026 13:01:25 GMT\r\nLast-Modified: Tue, 21 May 2024 22:08:49 GMT\r\nETag: \"587c32c3273acc239fbc4bb9e5b843d4\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 56ced7fb4a5f5b7dcb21d702d7954e9b7640ac9117bc09594e4aa69a6fe5277b\r\nx-amz-meta-s3b-last-modified: 20230414T110751Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 124238\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":124238,"size_decoded":124769,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 778x1500, components 3","md5":"587c32c3273acc239fbc4bb9e5b843d4","sha1":"7560dfd6a7fe9e551a5f2873acba3e3fb85b2fd6","sha256":"56ced7fb4a5f5b7dcb21d702d7954e9b7640ac9117bc09594e4aa69a6fe5277b","sha512":"40376c4067dc6b98954e1b0c6d256c4fffdb0103a8cd7196b94352142f1914dea2d100a93ff8ae8f2c317e7021e53de4fb66b48a7fb75c7ca893ba64d62b47cd","ssdeep":"1536:shZDVmbY6znwZhswT4O0IsZz7ww9lVE7fVI38evpSuB/UZkPeytpojDOfynx5N3I:sTDVmVznwZpT4O/s19lVE76seaOynx3I","tlshash":"d6c302707b428086fc95f9b811462d347bb685f0ae86844dd63068f50575782edef4be","first_seen":"2026-07-29T12:57:29.581876Z","last_seen":"2026-07-29T16:17:10.940012Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8157,"timings":{"blocked":7763,"dns":0,"connect":0,"send":0,"wait":114,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-07/71100c90-bcf9-4b03-af30-f5eda9bf5f01.jpg","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.574Z","timestamp":1785330076574,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-07/71100c90-bcf9-4b03-af30-f5eda9bf5f01.jpg HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: QWkNXsLBabPcqeh0FNRm29FRtj4zeZMcyXWb+abrA6/5CqfHbR4GEdTk8wZvFr1qzMBcn2ddbvbJ4OlKy3CYxvDu0BNyfjDg\r\nx-amz-request-id: 1EB0J9F7Q8CCW7J6\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Mon, 07 Apr 2025 15:20:30 GMT\r\nETag: \"39179f3a9d4ebee0e3b9dd1c619b1599\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 215010\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":215010,"size_decoded":215466,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2048x2048, components 3","md5":"39179f3a9d4ebee0e3b9dd1c619b1599","sha1":"fb86b2c0e1f1c5290ba244bc102359278b9faa92","sha256":"2e0b45d07971da52d502d664f0bc3bce2d31fe66b01209de18888708a006f569","sha512":"580cb1c9f444173e96255346d26724f0b59b266a3aa86390e01719e7d4d8e60fa2542786ab908167ded2ee6710eb7476de1f3dbb2af3e4869e608c75d5475b08","ssdeep":"3072:2ukzGY3zdL0lLUXSdnc1vJ34TwcS7tlGvMM1d0H1rAMEamhdIonMZJ:29zJdUQXSkKRS0dO1rADhionMZJ","tlshash":"c824b6138c148b83557987e8be471fac2f0a7b5cd8953aef54621e9f7f606221c8e05e","first_seen":"2026-07-29T12:57:29.78119Z","last_seen":"2026-07-29T16:17:10.936772Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":908,"dns":0,"connect":0,"send":0,"wait":120,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B08PCPPFYV/81GoMX4x1cL._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.542Z","timestamp":1785330076542,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B08PCPPFYV/81GoMX4x1cL._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: gLN9UrOSLjZzvOJqmQTVQziQ6mgkmulclW+Y+8VCtrmuMQT6HetN7wOQq//gSemQo43ybUeWdCU=\r\nx-amz-request-id: VYSCYHFXD5B9ESG5\r\nDate: Wed, 29 Jul 2026 13:01:24 GMT\r\nLast-Modified: Wed, 22 May 2024 04:24:39 GMT\r\nETag: \"9e7e6e8d904edf12c7dd2bfe15208132\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 166389\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":166389,"size_decoded":166787,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"9e7e6e8d904edf12c7dd2bfe15208132","sha1":"f648caf878a9f4fcfbf3682d38f65b89d18c4702","sha256":"7f142ce293c569f5ad0a0b241e4b80b844c1c39cdd1a424c5bf636d33b51f609","sha512":"d979698f928895fa098575aee830b7ac6b65254e57a2cb6690f9f813fd3c1976f3358c6326c51889e534c4f6df7457d848867f403a634c95cb793e4ed8f986d2","ssdeep":"3072:xUyWREz8alRzJv6apBcMc78GIFdqGUZSRgnLHtb6m96n1OECeWX:xg+84JnSvIFHASeL8N1OX","tlshash":"c9f3131756e75808cf4000fb06577b0ef1f5cd09d7ee5daba7a92f0894296c8ac1a9cb","first_seen":"2026-07-29T12:57:29.765982Z","last_seen":"2026-07-29T16:17:10.956997Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7823,"timings":{"blocked":7144,"dns":0,"connect":0,"send":0,"wait":122,"receive":557,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/img/pc-side-2.cced9562.png","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.593Z","timestamp":1785330076593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/img/pc-side-2.cced9562.png HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-21badf\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2210527,"size_decoded":2034755,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"9181ca24818339dab5564d3b8d08b5e3","sha1":"459a2c7f28b6896f59aa07578a1c025c4f6b2536","sha256":"6c502ada878a4e4c41e7d38410c07cd1394a5a73c21db1541b8ecd751017e340","sha512":"a8ec3d6d833ab8943183c116fdab5af0fa9c3469793dc5b644a128702501d79500403e018611f4aba2abeaf449836426eac2e53e2bf056804686ca8eb0597a7a","ssdeep":"24576:y7zXVYP+LuRCd3xauBCNJ/HAkBy8NSE9/ykriGBWr//Ymgi:A7w+l1ENJYMlZyKO3Yti","tlshash":"0f2523f7f463d610c06221f9967faf914e6a8b047d0054989633e3e9f774bb0082aed6","first_seen":"2026-07-29T12:57:29.649174Z","last_seen":"2026-07-29T16:17:10.921584Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1059,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/7d500cf7675642dd903a00f063bb2464.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.630Z","timestamp":1785330076630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/7d500cf7675642dd903a00f063bb2464.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 05:40:56 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":612891,"size_decoded":597775,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"55052aa6a6df648679a12c2385eda60b","sha1":"5189edefd04c0865eb8bd69d51915409c64d25cb","sha256":"7f212e3c6127d7b6f2de433b7e76a7d5098caafce87ae44c84e7730f6d6d0270","sha512":"06a73a26e6f264cae61b64de90e1fc279818b1cc4da3543e512f21efb0314342eb6ff1ab30d830931fe841f470d18f1ae782fe6f15d9ec7f343f6f1a82bc00d1","ssdeep":"12288:lfxPhwRkgYw8fAnWErZFnjJI56sYAO6evm4Q+5PNd8hbSwnrf5Oxzjc8:lfdsY5firZVjJC4Fvm495PNd8huwnVSH","tlshash":"b6d4234521e4f18ade776038ac950f770e6a2665a2ff0bb5cf78e0ad1023d6ecd69407","first_seen":"2026-07-29T12:57:29.698952Z","last_seen":"2026-07-29T16:17:10.966896Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1054,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1054,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/api/site-config","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:13.144Z","timestamp":1785330073144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /api/site-config HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:13 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: max-age=300, public\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1079,"size_decoded":1023,"mime_type":"application/json","magic":"JSON text data","md5":"66b091b5102e69f4b31f9ae335be7c96","sha1":"643b325ac5f10e9ba6a81b3c9d0ea02e4275e0ae","sha256":"c7f1f48c1f16a96edb41dfcd75f83af97b876f37c463ac3a6b21a01b115bdd63","sha512":"affb66f30bb4b205780214c506d2c447bf68d2c087fbbaf1002c34b5d02c8be1d69af60f146c45bfc33df10b00d7defc3fde45e336c2ee7cf6fb3c4f87643953","ssdeep":"","tlshash":"ab11f0dbbbfc8240031a3bc631cf959dcda6610bd48c9e6bd245bfac98e174b605b046","first_seen":"2026-07-29T12:57:29.352322Z","last_seen":"2026-07-29T13:02:10.812698Z","times_seen":3,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":920,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/css/chunk-637414aa.7b5c5804.css","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.332Z","timestamp":1785330075332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/css/chunk-637414aa.7b5c5804.css HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: text/css\r\ncontent-length: 868\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\netag: \"6a677b4f-364\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":868,"size_decoded":1303,"mime_type":"text/css","magic":"ASCII text, with very long lines (868), with no line terminators","md5":"c39ca13bdc2f4a622d1e12a41a629219","sha1":"09c1a5d40c3bbb3fc3e21b67c7ca886dff17a575","sha256":"9a0298fbd5163a4dbbe4944f7c825bac109b42227f6dc0d4553b69e701472896","sha512":"85feb07fc68ff6bb6d4646a662e9c7856e6f4781af897e9a0fe47e5a0a6b4560eff90bff5a84f694c5f8350edae14a0f794acffce9ab2dd41a6fa8c8ea3cb3ae","ssdeep":"","tlshash":"b0119cb3a176d932f9332c67374494eef19188e2e6528779fee7690cc08eb539620304","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-07-29T16:17:10.905903Z","times_seen":5987,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-05-20/35097c5a-dc38-4ee4-9512-873213cdc69e.png","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.546Z","timestamp":1785330076546,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-05-20/35097c5a-dc38-4ee4-9512-873213cdc69e.png HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: O9RF8c1vSMAH4jV0cCTGxG9kfuCYKvJsocV4U8WasFooFXiVTM1DPpW+yjA1DTNLwuMJ4JCFcwirIskHKwIVOA8qvW8lwlnV\r\nx-amz-request-id: 1EBEMC3KTMK699HD\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Tue, 20 May 2025 14:19:42 GMT\r\nETag: \"fe98f39b69827527b32c6a5947b1d50c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 307997\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":307997,"size_decoded":308453,"mime_type":"image/png","magic":"PNG image data, 576 x 576, 8-bit/color RGB, non-interlaced","md5":"fe98f39b69827527b32c6a5947b1d50c","sha1":"2a23b7bd9ac3d0d01f2d5a610ef2b44ded37ac0b","sha256":"14b4af456bc7477bbbe2b35d8d0b3c51504d9298386bf3cdcdfa512becfbfd8e","sha512":"f12f74b91eae06b26e40221a0be92534e8a377e6652d3a6b0fcfcb2c9f2fb74597dc4f0bb7331703e873e6152caafc3beb73cffd88b74c998301b116b00fa5f0","ssdeep":"6144:9Wp7bi6DOlHkpIv/8VA+U34ib3Sp/QioapfQ6xIxFAj76G2eSpcSPoITt9ej:gdi6YBMJUIw3k/jo2QQIxe3ycSQkg","tlshash":"7464232496b71bc9e9ccbbc07f1589dc717ab088f16a6b1c1641c4ca35ad1ec21ac7e6","first_seen":"2026-07-29T12:57:29.668881Z","last_seen":"2026-07-29T16:17:10.96925Z","times_seen":4,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":606,"dns":0,"connect":0,"send":0,"wait":121,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-11/0eb94cc9-11b4-4853-8585-ab934de13cb3.jpg","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.569Z","timestamp":1785330076569,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-11/0eb94cc9-11b4-4853-8585-ab934de13cb3.jpg HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: qRQ5zvPdKnK7MyiuohXA/ENbrSISfe6B36kExuppJ577fmMyw5ZiiSthMcTxJEoi4UFB7cP0ojO24HmUvOAvlZPxXDvqm7tN\r\nx-amz-request-id: 1EBE0MCQ9TVDN85F\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Thu, 10 Apr 2025 18:31:59 GMT\r\nETag: \"cc2d09e0a67e1a77092f173fb1db2971\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 126223\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":126223,"size_decoded":126679,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1500x1500, components 3","md5":"cc2d09e0a67e1a77092f173fb1db2971","sha1":"52b4c06628b6e2ece5571e9855be7b874cab62fd","sha256":"5b676117200c85f935f13b65af6d71a68ce987d9a121dce4551c089a57e1d4b5","sha512":"de34cbe20eac434177ee44bd23e3e7c0f3be8c242a6549ddfd1ffde7d55eefb734af1b69606d00b0c1b8d21ee8e37e2088be4f6e023f054719d006bba7105585","ssdeep":"3072:3qf2ZUI4K70dKNi2t4cJDUIVlLoIVpdhekSlZVLXVCq:3qf2ZB7a+ijcJDUKo6dheBr1","tlshash":"a5c383138c188f83656897e5bf530ea92f0a671da8c13aee14670edb7f247765c8e01d","first_seen":"2026-07-29T12:57:29.857549Z","last_seen":"2026-07-29T16:17:10.962105Z","times_seen":4,"resource_available":false,"data":null}},"time_used":908,"timings":{"blocked":780,"dns":0,"connect":0,"send":0,"wait":126,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-08/17813e93-8564-4c90-87da-fb1e4ab3076b.jpg","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.572Z","timestamp":1785330076572,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-08/17813e93-8564-4c90-87da-fb1e4ab3076b.jpg HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Z6HSvVwhg2yoMYa3U/6HIGqOJFGm6GimfzFrV/Qm1ClX82Bw/WopvKSR557srecflAhi/FoXsE3yh/CNivqGJra9actqJ93B\r\nx-amz-request-id: 1EBD8AM99EYJY1V7\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Tue, 08 Apr 2025 04:58:35 GMT\r\nETag: \"51ab278a77ca744665028a2346c2f426\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 152436\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":152436,"size_decoded":152892,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1500x1500, components 3","md5":"51ab278a77ca744665028a2346c2f426","sha1":"ca996a557db2f496a4e69c18ae202d6736d4a77a","sha256":"4e750cadf28676375f4cf92eb8d18be74b4a9fd032175493b951f7d58506bd69","sha512":"b3eea2fc7d52401cb32ad7cea78cfbcfa912a064d6ecdc8791d3699300b3e0bc85810eb54690b768c509d05e92bc3aa9597a500f61d785af9304406953a386e3","ssdeep":"3072:6YLqs/eHpDxnBNrPlWM9sUqeLcfJr5g+ZwpAZRJCIsHBPUriF:6EqKe1xnB6M9sUTcfo+WpWPbsHMiF","tlshash":"d5e3f1135c2cdec2666887d8be834d9c6b6a3b4ddd9039fb1197aed33d251601c6502f","first_seen":"2026-07-29T12:57:29.317846Z","last_seen":"2026-07-29T16:17:10.909441Z","times_seen":4,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":813,"dns":0,"connect":0,"send":0,"wait":112,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/crossDeviceRoutes.browser.js?v=Mon%20Jul%2027%202026%2023:36:34%20GMT+0800%20(%E4%B8%AD%E5%9B%BD%E6%A0%87%E5%87%86%E6%97%B6%E9%97%B4)","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:12.895Z","timestamp":1785330072895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/crossDeviceRoutes.browser.js?v=Mon%20Jul%2027%202026%2023:36:34%20GMT+0800%20(%E4%B8%AD%E5%9B%BD%E6%A0%87%E5%87%86%E6%97%B6%E9%97%B4) HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-e5d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3677,"size_decoded":1584,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"59956e0a0409c13b091ce4dacb62bcf9","sha1":"c794305599ba425006802e40bb11b87ec9941976","sha256":"9ef2b4b4357a25036c45a059ff71b9446ab5de27ebf728dd9e8eed09156eca8e","sha512":"6ea75745b77e3e6533ebdad25ad15516fcf486a3b33b565414cf816f5f78be50e9aa23f8da898342da95563d02dfed6cc2f4a19d73ee891e54edb6dcd90e02a2","ssdeep":"","tlshash":"76710fd499a6a1465a73e36e8d6f888cfab606b31165c104f8bc91342ff4d08437afe4","first_seen":"2026-07-29T12:57:29.730081Z","last_seen":"2026-07-29T16:17:10.920984Z","times_seen":4,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/lang-en.500a0506.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:14.803Z","timestamp":1785330074803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/js/lang-en.500a0506.js HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-999f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39327,"size_decoded":15016,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (35035), with no line terminators","md5":"6483e2aa96ae5f52ab44921a5237c171","sha1":"e6cb69e98cb0b6fe84271b6090827580f865f127","sha256":"7c1f9f76719a4a5096e1857d416270fbbc255a37f8f4a59c2f0bab5255988759","sha512":"5a575883f95457e81d89b0297e897e7887a77fac49223bda7beb41db143b24ea3d7d9e085921c0c79734b8cd7c7576d570c8754f94c18fbaa19b53df7520e7ce","ssdeep":"768:+511D8GAF5Htr5GOdf3tntBLW8qXS1HHE8auTWN:+D1D8F5NrYaBLqXS1HH0","tlshash":"50032c8df3561bba0d938316788f2be115d504d5e7a5096894dc803923eadeaf3f7388","first_seen":"2026-07-29T12:57:29.40283Z","last_seen":"2026-07-29T16:17:10.973685Z","times_seen":4,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/e3a48f8862ab423db449483456e68b00.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.119Z","timestamp":1785330076119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/e3a48f8862ab423db449483456e68b00.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 21:59:55 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102189,"size_decoded":99666,"mime_type":"image/png","magic":"PNG image data, 880 x 880, 8-bit/color RGBA, non-interlaced","md5":"06bb22ef7967d16b1c8ff6f503322a95","sha1":"2fc3231d7b9e1653bc6d6f958c9cf35856cd744e","sha256":"7a042b2fbb514a3e809370ae66114c25a34923b47c312b55467cd3b1eb493232","sha512":"0b8d9fbc9a6e0b8a206bb4e012f5bbc06226b1c71de63949951ea1563d017e5cdc25c2493bdd356266d8fcf4d98f0c9f1a45bffb33fcd0f90625e7c73c7aa6a9","ssdeep":"1536:x6TVukWdLO3HIG0kvpp/m2XfklOGpNnLiqfvreaIECwlysy1HQ+1YKkMKb:sQkW03onkhZRkIELbfvr4apy2yKb","tlshash":"a3a312f0f9fb9e86f8b61630c4284b8ed01465464beda58b5d2a31da25b03c8db6f354","first_seen":"2026-07-29T12:57:29.502282Z","last_seen":"2026-07-29T16:17:10.941749Z","times_seen":4,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B014NC3E3A/61caHzG%2BkXL._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.533Z","timestamp":1785330076533,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B014NC3E3A/61caHzG%2BkXL._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: bpWMdbw/FZK1QH83sqkAaTj35GbSw7s7RQhJFirFKHhW3K++FtWaE3LNnb7h5EOnTRtOAkJFoMs=\r\nx-amz-request-id: AQNVXTM3JFVSJH5J\r\nDate: Wed, 29 Jul 2026 13:01:22 GMT\r\nLast-Modified: Wed, 22 May 2024 00:11:06 GMT\r\nETag: \"c01e706dd1f9240cae64df1195e67a7d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 73420\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":73420,"size_decoded":73817,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"c01e706dd1f9240cae64df1195e67a7d","sha1":"b025f680c0bc6c23eb1abc4ee16d832ea967531d","sha256":"4e96fd2588650537fa155d523d207e81eb617e7a6e0c5ba87803e64421aeb755","sha512":"845104bde54e5c000c0db72b011335203f88a5394a38c1db3a0d9a154ca1d09cfb0a70a05db83da72a1fad165c3e87802dce13658cd10f8ec3e1f24b36917f11","ssdeep":"1536:JxvdMec0JH5BUcsQj1QtyHPrvbuj/MDQPlttOFPAurvwbMsF883bmYX4aMkFNmZL:zUcDEyvLU9t0dlwbxFb3YhZEFC","tlshash":"0d73f1cbcf6d242bc68d63706617b655e9374ec481bfa59c8b22f4e84c8a648f073470","first_seen":"2026-07-29T12:57:29.837514Z","last_seen":"2026-07-29T16:17:10.926277Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5945,"timings":{"blocked":-1,"dns":0,"connect":95,"send":0,"wait":121,"receive":656,"ssl":5071},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/bb7a2b853ff24f20b89480fc374f705c.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.651Z","timestamp":1785330076651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/bb7a2b853ff24f20b89480fc374f705c.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 06:12:24 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":978433,"size_decoded":970010,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"d6809dca2813042dccc43358a75d28bc","sha1":"562bc1a592d897a5f1e789a24d53f13d87e1ae13","sha256":"1158e6afe6df3ef36e1fb2aa01f11ad3255d6a2ca76bc20d8356dd8796f6e73a","sha512":"4b88472669f0dce57d13026b942d54a506c0cac1741e349c7eb20bbac05c396d9b4fd785098eee4d38edbb10d259712d76c61630418bd3153d6f05b88a63e5cb","ssdeep":"24576:DMoymmEoFD5ileI/7U1PYQymqNfw0yGjc8bJf08LGafVJAZZ8h:45DFD5iR7UxYA0ypM5L/Ac","tlshash":"442523c1d1b68181f55e5b30826877dcbce3797c5ea5de12eadac01cbd1c280a87c7a6","first_seen":"2026-07-29T12:57:29.568817Z","last_seen":"2026-07-29T16:17:10.95858Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-5f202a38.558e9228.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.343Z","timestamp":1785330075343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/js/chunk-5f202a38.558e9228.js HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-543e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21566,"size_decoded":7631,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21508), with no line terminators","md5":"0d91d844d3eb5535c1f4ff0023b4064e","sha1":"88c72d5ab07c5dbd7d3f84ae62190bb4f2dda010","sha256":"4fbdb315bd2c1d49978d5290bf2b728ddafbc875adc7bef9e7d1debdf8896ba4","sha512":"75ec6f794b58fe4a8f96f303978bc95d94845444ffc13a153d7cdfc4be3eb7a8f044da4dfe842ba6d76ea3a92b47c92bc57c67b9b369b6ae7d0f33fd5fd7a381","ssdeep":"384:M6hs74XhSJ6pzDX7uD/3I+Xsv6XT7xEb/2rcDVbk7wY6QaSX9ikk:9x6izDSD/Pj+b/2rqVbk7wYSE9ikk","tlshash":"b0a2c786e072a8ad899b5221311db3b4b6702f94a440c559b93cedfc61a4da1333fb7c","first_seen":"2026-07-29T12:57:29.733973Z","last_seen":"2026-07-29T16:17:10.930593Z","times_seen":4,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/82fb241849e045e4867c3989e61718a6.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.126Z","timestamp":1785330076126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/82fb241849e045e4867c3989e61718a6.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 22:01:16 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":230222,"size_decoded":230775,"mime_type":"image/png","magic":"PNG image data, 880 x 880, 8-bit/color RGB, non-interlaced","md5":"2af4fca34b946964398c708f875b54a7","sha1":"806bf2009eea5c353d9a15f9b07998f7f61a3b89","sha256":"daae426eca327d29b1babfaf33647f0d1d58ad5963e72d018293cc81502cde3d","sha512":"4f4bb5a6942bc659e76906481c16cc839c41e67e3ec7b7dc7309d59c10737b127978747585299e74e098308faafdaba6654efc6a130df4a596b009f0a8425165","ssdeep":"6144:vMQjYkzKkc5vrg3OWMvKwSeGSXo/keBu9Tle0/:9jv2kyU3OWIyn/lBQT/","tlshash":"8f241304e48efca4b47c6f751d72cc26f1a895cd9331150e526abc4f3a4e35a88bab35","first_seen":"2026-07-29T12:57:29.548459Z","last_seen":"2026-07-29T16:17:10.903835Z","times_seen":4,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260711/e20cbbf05f8048e1995be3e9ce7ccdd1.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.652Z","timestamp":1785330076652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260711/e20cbbf05f8048e1995be3e9ce7ccdd1.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 11 Jul 2026 09:32:23 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115592,"size_decoded":115400,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"e02ffb26e711b3b3c7bd0dd386a4b71f","sha1":"49b8e06c8e4541e267f65b6f3cff3f2ecd4dbf0a","sha256":"645f2cd6de92abb17d5ac803287e478ced50622d4982edb2cce3154a80e2c884","sha512":"df7083e3aed6e41df76a56ec2d999ce85b7d8373a645a6fda70e9f6728485c3b89f8f8f74e621faada5931218ab0ab90b7446fc1c56cd8014ab2b9140f6c1175","ssdeep":"3072:Y7kTAWaIIqAKCHEhFf9oDQW0Ex7G5MhEqN8LzLmUj:YwkIIoNCsEI1","tlshash":"2eb312041139d022f82f07f90afe2bd64ae7037fa5d758a9d87374e81666df2408739a","first_seen":"2026-07-29T12:57:29.71336Z","last_seen":"2026-07-29T16:17:10.96864Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/wap/api/activity/lottery!getCurrentActivity.action?lang=en","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.316Z","timestamp":1785330075316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /wap/api/activity/lottery!getCurrentActivity.action?lang=en HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: application/json\r\ncontent-length: 220\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-disposition: inline;filename=f.txt\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":220,"size_decoded":694,"mime_type":"application/json","magic":"JSON text data","md5":"82d59ecd5e158764b89441d66a874631","sha1":"f04b8da1c9dbb7eb616c772e6f9296465941eebe","sha256":"8e8ee1123cdd7c4dd70b5e65b2300b2c4ecbf04902f9a3c5217ee040bdad164c","sha512":"becd58f15835a290c508b0c6acc2a05d11b35fa7abf26592ce91defc5ea5839aa727d300ee106647b44779e8d017f3c64ac1652c0d6fc0b581a334e28e33a20c","ssdeep":"","tlshash":"10d023e0166c7490c30bc7c517ef21158e15b564845721356c6dedd041343a1bd10d65","first_seen":"2026-07-29T12:57:29.356966Z","last_seen":"2026-07-29T16:17:10.911757Z","times_seen":4,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/css/chunk-5f202a38.575a3a86.css","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.342Z","timestamp":1785330075342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/css/chunk-5f202a38.575a3a86.css HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-481e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18462,"size_decoded":6552,"mime_type":"text/css","magic":"ASCII text, with very long lines (18462), with no line terminators","md5":"e67783eada17c7d9e9e72da65b8f6e7e","sha1":"66e57e1a5f5f6b38fc0b1dda259a31fa9d17a588","sha256":"a2398af093474b4dc1f4e05630720a3433392e6b8f5fa7db8b43495a696f787d","sha512":"f81ba2d6f7c97313758560de256abfc01877c3f10172d49ca4620c4677212e6094d170d46d083ffceb6a326993cec64597caab74cad7ee0ac5939c9cbd2fd4a5","ssdeep":"384:OxKiCKMYOAsaOxlnseFS9sBiCKMYOAsaOxlnseFS9osncjUdG:OxKizHO3//izHO3/dsncv","tlshash":"63823aa1f270511df162943926c8c9ee7884fa0da2f592cbdd56742ad0cb7b3673878c","first_seen":"2024-02-11T04:26:50Z","last_seen":"2026-07-29T16:17:10.971384Z","times_seen":2010,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/ae10b073f84445fe99f828cc61b1bdc7.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.123Z","timestamp":1785330076123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/ae10b073f84445fe99f828cc61b1bdc7.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 22:00:19 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26722,"size_decoded":27239,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d35827a4904ed75aa90741f62f3e89ce","sha1":"223de9169113879b12ac4dd63973bac97165d85c","sha256":"5ec420d916830ac3ee08dea46378e19c59da9dbbfd5fc10f6871c2d7f07ec23f","sha512":"3c05f82f3b58f1840e354b8cae68c8166648ce403e6d24c3fe38c06fe31cbe325c7946207999429e33f27a2a108214fa658acd819e9e5f7b058567a4602a6221","ssdeep":"384:3qf0gYDDKJHM8lEDpCRWXrzCXPk/Sa1+NPuO3nFamkH7qy7I0X+BPx:EinzYEDpnKs/6uMaJ00X+Bp","tlshash":"f6c2e127f1ff6b2a4812912b1ba5c0fa34e9bf5d40a047f1296658e4f94f6a278c1217","first_seen":"2026-07-29T12:57:29.852842Z","last_seen":"2026-07-29T16:17:10.972663Z","times_seen":4,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B07F38DR63/81K-h2pLpwL._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.543Z","timestamp":1785330076543,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B07F38DR63/81K-h2pLpwL._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: AztQyIZcIjIgmy0D2Nj6+7wGAKN5mewCvePMsN4IX/l1vJCw+2oz2jCcyPZvZGmpF35u9WzyYh4=\r\nx-amz-request-id: VYSB6B2HGBR7BJGR\r\nDate: Wed, 29 Jul 2026 13:01:24 GMT\r\nLast-Modified: Wed, 22 May 2024 01:19:05 GMT\r\nETag: \"a4f4ccdf127a960b948dd424bd138336\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 128183\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":128183,"size_decoded":128581,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"a4f4ccdf127a960b948dd424bd138336","sha1":"935016047b4620f4af24f3d41e38e2b681c96684","sha256":"a3bc7414f471b216e1a3242278da9b4a51a213109355d25fa4b2b87c82b18d22","sha512":"7e360cb035b54038309898d88b17a7c48df148786db3510b53050456aa6e08c7a08378ce9bb9c983ebb2a97c001803efb42f4aa41711e0dace64c6780b8b90a3","ssdeep":"3072:POGzcZ5wVkPrC+n7lyiTJSy+HihYgaMZcPyUzfHpNO5n:eZ5wVkPv7lyiVr6caMKyQqR","tlshash":"d5c3122b1b681a8ff62277b3e86ac65d9fdacb75d09040d164e90cec0b891b4d9c13cd","first_seen":"2025-05-01T12:42:16.942357Z","last_seen":"2026-07-29T16:17:10.964597Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7667,"timings":{"blocked":7151,"dns":0,"connect":0,"send":0,"wait":115,"receive":401,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B09C7WNR9F/71iob18MhFL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.528Z","timestamp":1785330076528,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pachong/gaoqing/B09C7WNR9F/71iob18MhFL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dgpWD0w731m9XyuXW4kZw1E2B84+arMlubXO6E9iWp3Ib3VCtcUxf4Rsy1CYW/Mo8KVmxQ4WPl8=\r\nx-amz-request-id: AQNNQ7SF7SP92S1M\r\nDate: Wed, 29 Jul 2026 13:01:22 GMT\r\nLast-Modified: Tue, 21 May 2024 21:47:50 GMT\r\nETag: \"d3407955c5ee136c144025ea5688855c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 61b237541c8dee577926b811ad0d93ed6580ac3a08183425657697f465da7cb7\r\nx-amz-meta-s3b-last-modified: 20230412T103255Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 165959\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":165959,"size_decoded":166490,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1040x1500, components 3","md5":"d3407955c5ee136c144025ea5688855c","sha1":"5108872610786e81d38caa9bdb23e5422dcfd516","sha256":"61b237541c8dee577926b811ad0d93ed6580ac3a08183425657697f465da7cb7","sha512":"5834efcea716c1998c26482024586329a31f40e9f8a7e7ceb47c0dea914fa7c4c814ef35bd6bc4f82ea8baf8a39cf77f99aaa693f44e2b5b2bb2e6abc36ad8d4","ssdeep":"3072:3wXuHqdgKnk1oaSxfJrGuyPaWPjB/oG3pz4005bLwkxSZE3pnRUMnKj:3+8YgKU0lIuyPaWP1Tc0gAkj3cWo","tlshash":"5ff31216bf747311c8f990321b2f1e986ea46a0875a0c708b6eb374b1d031f2951daf9","first_seen":"2026-07-29T12:57:29.791624Z","last_seen":"2026-07-29T16:17:10.916321Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6702,"timings":{"blocked":-1,"dns":0,"connect":95,"send":0,"wait":123,"receive":1442,"ssl":5041},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0C29QBGK4/713z5MRmGkL._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.532Z","timestamp":1785330076532,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0C29QBGK4/713z5MRmGkL._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Y05+oLWj4AZHnB0uLU1ukLFZuTKfR7iIZTE9zfGHzZjGRN7DLaymyO8Ov9W3XKLW7kru9i5NL9k=\r\nx-amz-request-id: AQNT9QB00ATW6RTT\r\nDate: Wed, 29 Jul 2026 13:01:22 GMT\r\nLast-Modified: Wed, 22 May 2024 10:26:38 GMT\r\nETag: \"ad99bc448423241e0fbb863de125dda7\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 86623\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":86623,"size_decoded":87020,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 589x1500, components 3","md5":"ad99bc448423241e0fbb863de125dda7","sha1":"b19fe5f3b4ef907824149a4c76c74b684538a74d","sha256":"8ce556b134569ad6b2ee3c7d8c5a6254a54d23b90d5094341d3f36131231a2ec","sha512":"e5a1792d57aabac942f117a8b5ddf9afd3372f8c215b8a29195f17d12c4aeacfc20b29dc6f629d214b6c460781029eeb62d9abeda3b84165c8085d987c17918e","ssdeep":"1536:2UcB16cdBniDc1R71mer3oC2nGZIRqGGPNGi90HjtnR+ayzzhNHq:yacx1qicGm0Tlf0RlyzdNHq","tlshash":"d783024863f9c0f6f459b9b168b3ca4e0086a5dc06990a832d4c7106df7b7cfc96b5d8","first_seen":"2026-07-29T12:57:29.312221Z","last_seen":"2026-07-29T16:17:10.967455Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6169,"timings":{"blocked":-1,"dns":0,"connect":96,"send":0,"wait":176,"receive":748,"ssl":5148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B084DMP67N/81pSc3YMaIL._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.536Z","timestamp":1785330076536,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B084DMP67N/81pSc3YMaIL._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: oFDLZfATxdPhr8HSl6AMvC87pG/oxI995HWEyxU+czPj8yf+CVuOgJSqYYWIE966ry6K8aEKk2k=\r\nx-amz-request-id: 620MPHZ34NFW5ZKR\r\nDate: Wed, 29 Jul 2026 13:01:23 GMT\r\nLast-Modified: Wed, 22 May 2024 03:02:02 GMT\r\nETag: \"d347a86cd76029276a8e75cc1fc6c2ef\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 185535\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":185535,"size_decoded":185933,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"d347a86cd76029276a8e75cc1fc6c2ef","sha1":"c1da13fcb70a6e10fc9c55dfd64b19c82ab1ecb4","sha256":"c95244f9e0cff20f181f4363a7c22cd709f7308fe6540ed5a30ef27bcb4fa076","sha512":"157824f6f93b74483caa5c2fcba3f60fffe2e0e35711d66004da859ae6ef79ccf1f032fd2e5fe95008217f46347e5816fda82bf60741a7727f686b36c0959087","ssdeep":"3072:P6cicp+tsRzJl6uu/1gsPMg4HZ8/WUa3Mrhrvturpv8SAtuV3t:yGPl6uutNeSlikhTtQpvbAgt","tlshash":"8b04124ea44f0990c2f9697a9825b9171db69c40ff3412ffb6ba4e1dd8e313907b2d81","first_seen":"2026-07-29T12:57:29.76481Z","last_seen":"2026-07-29T16:17:10.913329Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7144,"timings":{"blocked":6097,"dns":0,"connect":0,"send":0,"wait":118,"receive":929,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/c6b6725e-e73b-46ab-95f0-98f0826faf43.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.552Z","timestamp":1785330076552,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/c6b6725e-e73b-46ab-95f0-98f0826faf43.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 7RMPvJf1+2zR0voyvJrXoR8qbDNO9/j/wwanL8N2XG6M4ID+ZxBBxCC3zBduTclfYPK/gFrd4wU=\r\nx-amz-request-id: S72Q9J64WY8PSH35\r\nDate: Wed, 29 Jul 2026 13:01:25 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:39 GMT\r\nETag: \"d39c1d859a22a2bcdb2deb1fd14edcf9\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 38692\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":38692,"size_decoded":39089,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 544x1500, components 3","md5":"d39c1d859a22a2bcdb2deb1fd14edcf9","sha1":"6638d735f2281672c10ed2adc28ebd1a0a57589e","sha256":"394571987712c4da389981df4e30c61348c1857ce2bd84c22f0ae6fb5574d105","sha512":"43f31c7c19453cc7f94f52f11330128afb5fc6725e42e49831a363273233b824caa982278eff3218aebea071ce1f29fedd75afe50eb862a37cf0864238b9e499","ssdeep":"768:1AJKC9/wNvsHcSA90pdoE0p0VXcLOKGUWFfgcGBMG7ZbRVoEBVe/SlPhk:+79/kE8V9nE0p0VXOO/x4cGhRboEBVvq","tlshash":"6e03e1ee727e10f4ccb8537f92e7a1127f495828e31121ca46d82c5d24dfa01bb995e3","first_seen":"2024-05-03T01:49:14Z","last_seen":"2026-07-29T16:17:10.928856Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7661,"timings":{"blocked":7437,"dns":0,"connect":0,"send":0,"wait":124,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/img/pc-side-3.af628bac.png","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.594Z","timestamp":1785330076594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/img/pc-side-3.af628bac.png HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-261520\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2495776,"size_decoded":2438448,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"a21f28fe1ee9ef40ca698e538574acc7","sha1":"9b8cd2effe4fe1152976afe23879094015518493","sha256":"e082b78fa9915e5a657eac0bb2299c181d979a26da155450b7aa41bedf5816ab","sha512":"76f328ae4f994c2f2d05ccbd4bc71a8a060df4bb28a07e7ee69a8ee2c3f78dd588b54846ef84c89c653a8ba5e9dd60aff7229d7b22d1e161ed03cbdb698206c3","ssdeep":"24576:KVSb/FP4CzFPOdN+fg/CsySLwr4nj4iwrqtW:sSJP4CBE+o/CtScknjR6d","tlshash":"b72523a76033e785c463e3fca21225cd9f5d4745a4104185bd76cbaaf7b8ea08f36e21","first_seen":"2026-07-29T12:57:29.621804Z","last_seen":"2026-07-29T16:17:10.963968Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1058,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1058,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/fonts/element-icons.535877f5.woff","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.583Z","timestamp":1785330075583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tiktokhkg.cc/buyer/css/chunk-elementUI.6b92dc4c.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\netag: \"6a677b4f-6e28\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28200,"size_decoded":28639,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-07-31T08:07:13.852508Z","times_seen":29269,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-05-20/f8857aec-bc72-45d8-ab1c-cfb19fb54f99.png","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.544Z","timestamp":1785330076544,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-05-20/f8857aec-bc72-45d8-ab1c-cfb19fb54f99.png HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: JgWi9T2ImAuE1UZuTjlpn68C/iCMomy+LdePgbguKu7BT3bnyPL0OCqVL5UkA1fSD6ZvUP0aYynsNBMltL30hf/2AVpWNbN/\r\nx-amz-request-id: 1EB1T81N20F2AKGD\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Tue, 20 May 2025 13:49:10 GMT\r\nETag: \"799b5006068fb211caf7a869df788b60\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 286506\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":286506,"size_decoded":286962,"mime_type":"image/png","magic":"PNG image data, 574 x 578, 8-bit/color RGBA, non-interlaced","md5":"799b5006068fb211caf7a869df788b60","sha1":"1896acad210ef9afbb475f9497a24d69379e1a73","sha256":"1b2d70c161e1bc9dc9cac6ea8af96159d732899dd8bad318a626ed762940ed32","sha512":"171ad62c1e01981f039dbf253c0feeffa05bbbe3b45c7df43855d0bc81ef883772d66e9eb4d126da30907ff039e5b088d26c637a0a38cc349317bfb72bd808cb","ssdeep":"6144:W5f7ELu+AdRRV/CO52aSPAwZwbOQR1ywI+cvkue35wYQwuhd9uGjQ:I7bRUOwaSowZ4j1y63u88Q","tlshash":"0654224ce1345dab89038624cbb7741d3ea165826cc177ce7bbc491b98ea10ad2c6b7d","first_seen":"2026-07-29T12:57:29.854115Z","last_seen":"2026-07-29T16:17:10.923633Z","times_seen":4,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":563,"dns":0,"connect":0,"send":0,"wait":128,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/77574acb-f2b6-46f1-804b-747c700513d4.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.555Z","timestamp":1785330076555,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/77574acb-f2b6-46f1-804b-747c700513d4.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9V/WPQm43wlJ9ZPm1lapvFf21nezwqc0ZakVcy6P5y9qmDAGbgX1Awr02KZOoBp7CclY78oeEhg=\r\nx-amz-request-id: S72PR3RAHJGZK6JT\r\nDate: Wed, 29 Jul 2026 13:01:25 GMT\r\nLast-Modified: Wed, 22 May 2024 20:50:45 GMT\r\nETag: \"d290427ec1b7082ff93e0eb1b81fd491\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 92664\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":92664,"size_decoded":93061,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1283x1500, components 3","md5":"d290427ec1b7082ff93e0eb1b81fd491","sha1":"a34004064e646cfe442d79c50e7d3912b6fd5fef","sha256":"c74c380c6d2fd6437d867851d9714c65839621e9f5b38ce5df2647dcd48d47c1","sha512":"9b21183851337061e54c06c263506d7b6819696e01601b075a130ce6839d778358ee2c2e5e7799d6a9df7ce847eafd2f0f3c7f91c14c7ce2cc6dd5dbc7dbc555","ssdeep":"1536:3jHrmcae2m/nGFfUPDWNPEPwwYMUMOLO9mTpUctP9si/ZMtT:37rmc3/nGbqTDmSo9/utT","tlshash":"319302dac1e4f991d7618337a1be192ce2a587337143a3cf7491b835255b2883f4ba9c","first_seen":"2025-08-05T14:28:37.197912Z","last_seen":"2026-07-29T16:17:10.968069Z","times_seen":16,"resource_available":false,"data":null}},"time_used":8076,"timings":{"blocked":7597,"dns":0,"connect":0,"send":0,"wait":108,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/fonts/element-icons.535877f5.woff","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.330Z","timestamp":1785330075330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tiktokhkg.cc/buyer/css/app.0d55f464.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\netag: \"6a677b4f-6e28\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28200,"size_decoded":28639,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-07-31T08:07:13.852508Z","times_seen":29269,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/css/chunk-swiper.859f4391.css","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:12.905Z","timestamp":1785330072905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/css/chunk-swiper.859f4391.css HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-3427\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13351,"size_decoded":4416,"mime_type":"text/css","magic":"ASCII text, with very long lines (13351), with no line terminators","md5":"9eaaa03f95c294d151665c8bc6faf2e0","sha1":"b1b453d74b47f0b4477bc1f20844ec80b6fc54bc","sha256":"5376a83f09008dafef4f5666de7755231764549d97bd176e6339c2f3f0f108dd","sha512":"2c11a48e700f6a71b12ec8a4edb085052c7ee5ea7cfc18a5262433d4035e60f3b263112799034ae027b106453aeb661efcb2fe70d6a3eba84dc70fe1eb5ac318","ssdeep":"384:2UbeQSCRgt9BUArb6C6if65WJ1mXAA0TH5x:fb6CObhrb63if65WJ1mXAA0T3","tlshash":"8452326457003837f3774f6e0aa1e6b59f60cc838a934d9db2c0dd44d6f98b9132eaa5","first_seen":"2023-04-11T17:45:13Z","last_seen":"2026-07-30T19:42:39.813317Z","times_seen":348,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":703,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp11245/B08P25VBY1/61nKJ%2B3s3XL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.523Z","timestamp":1785330076523,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp11245/B08P25VBY1/61nKJ%2B3s3XL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: v/XSPa+kX3Cg1noaoBZhmiR3uO6kelturLvUyzM8IJUCjMyLEXqchMWWLf/pJ3NgMdwwtI91pOc=\r\nx-amz-request-id: AQNRWZZMDH9SKDS8\r\nDate: Wed, 29 Jul 2026 13:01:22 GMT\r\nLast-Modified: Wed, 22 May 2024 11:33:15 GMT\r\nETag: \"1b1c2c18819562ad9c1cfc2382401de3\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 58580\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58580,"size_decoded":58977,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1470, components 3","md5":"1b1c2c18819562ad9c1cfc2382401de3","sha1":"caec179eaa69afe64e19f33928c729bc8b2828b7","sha256":"526fc8d89295ebaaec3a1275bc9c146c9e8db1aaa827e81e152bbc83244ef521","sha512":"572a51eedefcaa8c7c706f7a7f3f7d7a3d54d98cea0d0eed9e3882e9688acf775bee63fb5dfe4cadd9b8e2f9f2cd58d03ea2668289e9f49867abe26baecb2a99","ssdeep":"768:1jYxSqRgjO/eJI8PfTZVGilWxH3QxviayHjKtTAZtOdP5i61YrIK6gCKlWOuNjQH:JYxLyGili3QivHjMEDOvEnxlWrBS","tlshash":"174301a74934c067d0db23724dfb4175dc336c632a8d4495a74720ae26586bcaeea7c3","first_seen":"2025-05-01T10:56:38.544624Z","last_seen":"2026-07-29T16:17:10.915479Z","times_seen":76,"resource_available":false,"data":null}},"time_used":5911,"timings":{"blocked":-1,"dns":0,"connect":96,"send":0,"wait":131,"receive":567,"ssl":5117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-11/f081c9c7-d7cd-4b93-b9ff-db0f1dac12e4.jpg","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.529Z","timestamp":1785330076529,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-11/f081c9c7-d7cd-4b93-b9ff-db0f1dac12e4.jpg HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Vx0EsGPmzT29yCzW0NZcRef+Ljv+Pq6Kf2q18L4zrW16dFHYJnIGipv4n6bJOCXKX9FbkisJqLfVwEiEwqmWgqQsiukQbU0k\r\nx-amz-request-id: G9PZE4D7720D8S6N\r\nDate: Wed, 29 Jul 2026 13:01:17 GMT\r\nLast-Modified: Thu, 10 Apr 2025 18:46:41 GMT\r\nETag: \"4ab7d1ec9beb15dc0f5267c8effda5e8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 90135\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":90135,"size_decoded":90590,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1500x1500, components 3","md5":"4ab7d1ec9beb15dc0f5267c8effda5e8","sha1":"71bc59eb41cc9bb9d8e0ba7e002bc44498b67872","sha256":"2400290632d13c56486486b7d35cad5c9abc20ac5968c202bfe3efffb6043df6","sha512":"90a4cce9f6eb02f6b15bcc83127adecaaec62b64c4d3ae29cbad986af44ca2426c1c5912bb12cdd79440cf88f523a35aac38e85834d030646c0234d945cc32ae","ssdeep":"1536:elDFl8k+s81iK613flAbweVNo+3qLTJB53vViQa8jwQ76xPoR8u:AT+2KM3flAVo+3qLTTfUQ7yAR8u","tlshash":"5793da038c148b83a47587e8fe074dac2f5a3b5ce8923afb10635edb7d242524d9d56e","first_seen":"2026-07-29T12:57:29.721539Z","last_seen":"2026-07-29T16:17:10.932973Z","times_seen":4,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":102,"send":0,"wait":138,"receive":197,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B07Y2PZTQ5/719iYK%2BD7dL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.563Z","timestamp":1785330076563,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pachong/gaoqing/B07Y2PZTQ5/719iYK%2BD7dL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: sr/eG09tck0TD27ubBUz/sQjwDRk5q3tJvxluzXU/s01r4DDsxuy8HGLjivAGGYRYpAfdBCC14c=\r\nx-amz-request-id: S72T475REG0DJH2Q\r\nDate: Wed, 29 Jul 2026 13:01:25 GMT\r\nLast-Modified: Tue, 21 May 2024 19:37:52 GMT\r\nETag: \"759d0bce08a38b0d94ad1833e2bb14c1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 9a1b26233d26c160523276dd0f40be679e78b0fda8c01c82041f42c8545f0a68\r\nx-amz-meta-s3b-last-modified: 20230414T111206Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 173956\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":173956,"size_decoded":174487,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1313x785, components 3","md5":"759d0bce08a38b0d94ad1833e2bb14c1","sha1":"43ec4e7b53ad5d9d3f39dcae00e525fb02c6fa0a","sha256":"9a1b26233d26c160523276dd0f40be679e78b0fda8c01c82041f42c8545f0a68","sha512":"1713411ef6dfd41667bc8a61d712569f9f47ce91446606dcb6ac87b14f7542e2b58842463fac1d7c9343bd3cbba3983c53989f3463662963be43598b15d75bf1","ssdeep":"3072:8aIThAzSsjYxwP2t7qeLF39XKU7U+HJaNL6m0Tu+zohN6D2Dn3xf:oeT0CGl7UKJq9+Mb6D2Ff","tlshash":"890412e7bb294850fef5d43d25c8eb692b0f8f59b95c70e6fd258bc0648b614280909b","first_seen":"2026-07-29T12:57:29.419006Z","last_seen":"2026-07-29T16:17:10.980475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8312,"timings":{"blocked":7818,"dns":0,"connect":0,"send":0,"wait":120,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B01IDF31MW/71c3toK4COS._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.565Z","timestamp":1785330076565,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pachong/gaoqing/B01IDF31MW/71c3toK4COS._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 7Pd5FUWb/YdWnDa8ObkeIAShFX5pLYcvLZNzDRVviNKyd+sJjQzuzmCdpAyv+pmc1HQaron8lpQ=\r\nx-amz-request-id: S72ZPYMDCBWMV9N9\r\nDate: Wed, 29 Jul 2026 13:01:25 GMT\r\nLast-Modified: Tue, 21 May 2024 18:22:34 GMT\r\nETag: \"4d845ad8702864062d907056e0d4db38\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 26759354cec2cdec7416d5491233f111a5da9be91c55691325ec1476bca0e1cd\r\nx-amz-meta-s3b-last-modified: 20230414T110813Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 89672\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":89672,"size_decoded":90202,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1024, components 3","md5":"4d845ad8702864062d907056e0d4db38","sha1":"b850e5c9209e8a53943c4c1df3b5d5d32336a156","sha256":"26759354cec2cdec7416d5491233f111a5da9be91c55691325ec1476bca0e1cd","sha512":"96e04b10ffa759081ae2a28a3fcca06268562b0ebc17aab1f3ac8e06cd8f1981fa9338fa6da15e092060bf41dd0de889b1a6b8fce42ccf2c440548cc0ecac8c1","ssdeep":"1536:gxQknq6+aDUU3eWIbj5ad2dt/x1zBB2i0GIK4PiMAInBH/5p/85mmRwCfLLVU7v/:4Qknq61III350KTzBB27GKPnp/8gewWO","tlshash":"709302f0c9d0a8bff51c25b8980d486ed95cc5d1ee60eff659a8d164fc13092bbe8824","first_seen":"2025-08-28T14:01:41.834101Z","last_seen":"2026-07-29T16:17:10.981061Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8293,"timings":{"blocked":7972,"dns":0,"connect":0,"send":0,"wait":121,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/banner/20260703/ae0a679d0bed486ca524fef338f023fa.jpg","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.585Z","timestamp":1785330076585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/banner/20260703/ae0a679d0bed486ca524fef338f023fa.jpg HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 02 Jul 2026 20:52:32 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2384183,"size_decoded":2326259,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 3440x1528, components 3","md5":"18192340e047e535de22c22d2c0e7bf4","sha1":"7fd836a8c33cab71bf9def3a31522ca13c346268","sha256":"30c036dd3820053634f79eda9ddad9749cab011a17b2a580cacfa33659b1589d","sha512":"4eb5671e570cad297dcb0af939f14377e8ce726dbb3ad3ab438af7299bbf6cac09603ff0ddc9fe891cd655c3793ed939e2f857eb2d19856a206d3255c5b861bb","ssdeep":"24576:KnN07mZ2yTM7+DeUd3/YRB2lb9zlw03RI9orDwLk:MN07CHMxm3/YRBibZlj3RImDwLk","tlshash":"ab2523d49986a9acca3c0322f897ed5d63412fb11cac8e5992411f48f3cc247fe665ed","first_seen":"2026-07-29T12:57:29.763768Z","last_seen":"2026-07-29T16:17:10.982799Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/css/chunk-200df844.6863d921.css","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.297Z","timestamp":1785330075297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/css/chunk-200df844.6863d921.css HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-19c8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6600,"size_decoded":2132,"mime_type":"text/css","magic":"ASCII text, with very long lines (6600), with no line terminators","md5":"da2de257c0c24d89e65f962205a1138b","sha1":"07476ddd635e1177168813b38ec243cf0006050a","sha256":"b07267c8d45bdaa39bfb686b9699e548994344e24c4d652fe92cbfdc4e77a6fd","sha512":"87e22c0a0c414596069748f4c2d0bab523ad0014262c90c2178898e5bf8fcd3438353ade755de221393c0b03090d918296bfa8243adb9c736a92b3d63b7d1f58","ssdeep":"96:Zsivfdy8lOFD1vq80WV/LPxDmvo6SOwUu50NJj9MCg:Zz33lSD1v30I/LPxDWrhxuuzI","tlshash":"57d1def2f231112f7426a53be1c385e8bc86b10e93ffd686ff84b514da69196063518e","first_seen":"2024-02-11T18:17:19Z","last_seen":"2026-07-31T08:07:13.865561Z","times_seen":5428,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/4a6868833b014a72814d03fc922e1091.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.127Z","timestamp":1785330076127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/4a6868833b014a72814d03fc922e1091.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 22:01:23 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25822,"size_decoded":26339,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"8cb9d8aebf29c7ee16abbadd43540793","sha1":"80f08f809a1d8081b355050a40c5102a06cebf0c","sha256":"8cb148897e3a5cad4af0996d1116e0257270438506410ce1318c55d3bc854caf","sha512":"5254263a16f19515491546f06f27ba550ab70564e89a14a454ba78422cb719a4df392bd7bf1d5cda868e4d13b44dabc4c83faa61c3e0ce1788bb674b9973660b","ssdeep":"384:/A8deKqcfMRFGG6c6UAi5RS09Wj7IvlNt5oTEeaAS7hv0yLHq9gJaXYbprJk4Y9e:/xdPZc6Uvg09DlVoTEer8LLK9KaXAkJ8","tlshash":"99c2d044f165098acca69b80ab631e4706b8858c730ebabd2277ef37cff23115594b61","first_seen":"2026-07-29T12:57:29.35902Z","last_seen":"2026-07-29T16:17:10.91057Z","times_seen":4,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-06-18/f1472b45-16cc-46d3-99ef-83618234c2d6.png","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.568Z","timestamp":1785330076568,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-06-18/f1472b45-16cc-46d3-99ef-83618234c2d6.png HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: TOHOz4MD3JpF7zM1cnOsdW5UNzNfJEEtUVkzeIur3d+1fSFpusqP7ICCDwJ0wxlTN5WS7KUWrJFyOU9BIPqVWw4wUdKuSSz+\r\nx-amz-request-id: 1EB4TRW6X0HKMEB4\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Wed, 18 Jun 2025 12:45:51 GMT\r\nETag: \"c703022307e774991e3b24bb0ae9139a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 193246\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":193246,"size_decoded":193702,"mime_type":"image/png","magic":"PNG image data, 575 x 580, 8-bit/color RGBA, non-interlaced","md5":"c703022307e774991e3b24bb0ae9139a","sha1":"822180cb80da2090f8bf9bbc841fccfbc959b4c1","sha256":"ed835cea1970d399e0e61c650d861ed1f15b0d8843d482000562a82a53dc8fb0","sha512":"f547032e5704e3b20fc4225f64cb42483bab1d4f27408b942669f35da70d7ea48aae85ef31cbfcfa803fb8a9c4b4ba2c35416ce4fff54882b833c7fa8233aaee","ssdeep":"3072:3CEHsH9tIU92R1b4ioF/JoTBunlvsMBYLB2yRM9nmRavykG/SCyvhKUrvHu1sXcV:xHs62F/GwB3lYhKCyJK+vbX2Xf","tlshash":"fe1423946bf1670b8c7827d56215a186fe6303aaa301dd1c893d2cb2b0df58d0776ede","first_seen":"2026-07-29T12:57:29.812865Z","last_seen":"2026-07-29T16:17:10.916795Z","times_seen":4,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":721,"dns":0,"connect":0,"send":0,"wait":113,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/img/banner_01.262eb016.png","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.580Z","timestamp":1785330076580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/img/banner_01.262eb016.png HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-19d807\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1693703,"size_decoded":1513213,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"af9658a56c05d7350bb4cb58bb02a52c","sha1":"0969e97aa59d23da15eb05e0aee786c809b2eb44","sha256":"f52b339523e4e64077f6f2c4eb6686029254079a8ec4b0df172183485b3b93f6","sha512":"4988045cb719b828dcf99925997d56ed2d8c33f615cce456e392be5050e905890859a2443a7b45ff9e20886c206db671e123c65ad73e5a82603ce0c922221878","ssdeep":"24576:La/oqxxNGzb/9Wuc5JmaZATUghY0FPZVJ2ESPo9:kHO9Jc5JmhTUgy0Fbf","tlshash":"4225237b7421cb51c7b316fc74960e7c46aa57182a800328be779377dbb8964833bb42","first_seen":"2026-07-29T12:57:29.762412Z","last_seen":"2026-07-29T16:17:10.926788Z","times_seen":4,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/banner/20260703/81d2ac9d6ef34a93a739282401b093fc.jpg","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.583Z","timestamp":1785330076583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/banner/20260703/81d2ac9d6ef34a93a739282401b093fc.jpg HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 02 Jul 2026 17:52:05 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1202837,"size_decoded":1153760,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 3440x1532, components 3","md5":"707b3d7caa539c9564940e26c604bda3","sha1":"93b671c998674d4c2ea4e6f188df2b49b2135d22","sha256":"889e2ae6464bb0ebaf9ed7af4fe67ef3f73b8a6c60d091f7a191d5d80a87c373","sha512":"c1cfa91ed51c2efddc32e406ac8581e016ee6c067e1f7ada8e029b09c086ae10c82120bf9304e1978744c106232a8e6e1be92ebfcf004aabc702b8ea6c8e4bd7","ssdeep":"24576:FbNpIgLSF+hyvmnoMrOstzfFxxMyaNK0+kdIba+UwGqjFqo1:FbzLSF1+ks9poKtkdIbFpp1","tlshash":"c62512038e05cae3952c03a5f8835d2d1f457b5ca4f97efa41064dab7aac2176c9b1ac","first_seen":"2026-07-29T12:57:29.386322Z","last_seen":"2026-07-29T16:17:10.945482Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/ef142a95230949b7908c825062e91713.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.635Z","timestamp":1785330076635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/ef142a95230949b7908c825062e91713.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 05:50:04 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1500584,"size_decoded":1489671,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"6203394828b0055a5b35c770fc32b951","sha1":"7966173cc6153c8642bf6b635f9b4288e356bdff","sha256":"e395ec6c0dec3359a7e4f71ec554e2489353e9c4b4da539fa9f0138b2c39a14b","sha512":"2d09de742d878bf93f9457d55385f5b1735cc82d3ba6f5d3c4be7e6cd703a5f64018ac0ede334158205d0b8b7054a178460ada11ceb5cf7ad1f45561e15ce1a3","ssdeep":"24576:gMrUvTJdEmlDrRifW9tWJ7ZiL+0bQFsGYKS3aO6ukfv:hrAt9rRWW+J7ZiLCCGrSKOjkn","tlshash":"82252318f1fcd5ccee97b278c99d9e8a18908676779279e0d521c026082daeff538f05","first_seen":"2026-07-29T12:57:29.699996Z","last_seen":"2026-07-29T16:17:10.946622Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1051,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1051,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B07N9K865G/81AuDDAO6CL._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.539Z","timestamp":1785330076539,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B07N9K865G/81AuDDAO6CL._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: kyxA8lam6VEPD0N8Q64caJiqUbaG/DAlLNGNQuKmrLjC0k4OHLYvUIoRwvRqmfcxI/4Z8XNYV5Q=\r\nx-amz-request-id: VYS9DNKGJ2NWF8KH\r\nDate: Wed, 29 Jul 2026 13:01:24 GMT\r\nLast-Modified: Wed, 22 May 2024 01:49:45 GMT\r\nETag: \"468e3c3ccf6c6ce0aef7a72135fcb2b2\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 171402\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":171402,"size_decoded":171800,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"468e3c3ccf6c6ce0aef7a72135fcb2b2","sha1":"5ba275aa68defa7541a5abe240c933837879e777","sha256":"1952a3641712d75a1b647338dfbb147c6875926bd9de8343c78faf8be5df62ca","sha512":"8c6794327f7caf2eb45762dab98bf51210d567ab86bb4be1e95f0126436da09a3ad0605181789524e3585895a1c3d345c7cd646c68f34b5c6fdca468aa090ae2","ssdeep":"3072:dZ+yTladMO2A14qgnxmEu+BdCmC84t7LEQEEktOUgSWzAna2Rs2N9cL9H:d7TaB2Akxmt+oTt/gDAS0AnaUsWQ","tlshash":"05f313f8c0296382f52f363007a74198e5e34b077106259a7b0d091f63dba96e797ee7","first_seen":"2026-07-29T12:57:29.615011Z","last_seen":"2026-07-29T16:17:10.952703Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7406,"timings":{"blocked":6547,"dns":0,"connect":0,"send":0,"wait":119,"receive":740,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/banner/20260706/4aa253df25754c11a927a2e74c48c9ef.jpeg","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.581Z","timestamp":1785330076581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/banner/20260706/4aa253df25754c11a927a2e74c48c9ef.jpeg HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 06 Jul 2026 09:22:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":862114,"size_decoded":860832,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 2912x1440, components 3","md5":"31867c3a8c26482450ec5451fd7c3543","sha1":"bdbd4d1c48e1055a6212e01b4ba8a2a2e099827a","sha256":"a4323e9eb96d6c06855bbecf339e665b5da6387729cbdb19c1c04f61ba6345e0","sha512":"3c87cda284a20346f27ebae8a995ad905b8de3efa79e3ad8efb9942911edfb5ee72d883f1324817ff640ed9c55a7974140bed4f4739ae1f587b297770fe9fdc6","ssdeep":"24576:HPtF/OPHwkkbiBXL8y0ueCQZobX1ZS04o1COPglAVb7y:Hv/OfaiBb8y0u9qoRZS0oabW","tlshash":"6005237461027b23cbde51ae78a81cba8914043c77cdb98122d65d56b3eceb98cf193d","first_seen":"2026-07-29T12:57:29.491873Z","last_seen":"2026-07-29T16:17:10.949677Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/img/pc-side-7.e2488909.png","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.590Z","timestamp":1785330076590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/img/pc-side-7.e2488909.png HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-16c48d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1492109,"size_decoded":1314826,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"49cc9844bd328e7525647318bb0df997","sha1":"15278013891aedf427abd23253beda0d97fe1a69","sha256":"43b539f1dfb4c36bbf849605f0825961b447c806e724e138a9e4617dbaa3c067","sha512":"17c7a8de6d480e3150c505ca3d27a9e4c419c2828486cf65ff3e0dc882eb3e910f90e237ac2842b5d14f771c3607676526ef24c24d8772103eb93962dc89019e","ssdeep":"24576:ixPneI2oYFNTZf31XVixYo3Y9UYyAyDSoBimiFNJrgVlNGYGZy:Mne3ffFX+dYyDDriFTr4lfn","tlshash":"042512e38450e4c6c4c161fd8c7eb6df81554b628510e468f639ae9fffa86b80d0c7a9","first_seen":"2026-07-29T12:57:29.270893Z","last_seen":"2026-07-29T16:17:10.934248Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1061,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1061,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/5a9edc4db1bb4945bd4a51737a50cfa0.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.641Z","timestamp":1785330076641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/5a9edc4db1bb4945bd4a51737a50cfa0.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 06:06:46 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1456661,"size_decoded":1433876,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"210d48afce58d0b60e3be18132b1d9ec","sha1":"d998122b0888988217f7b53f572c23aead72705c","sha256":"aa78406a1e9ba43fcf71567827e392de75458d5f1c92d556cea9da0a224236ec","sha512":"2044aa451e390486e8d7bbfb3694d0864c74fb033d317e40c78a6841d545bd111ff8a2e08e82580ee6fad843cfcadab84342c446550fd0904b30b3d0e31f2b1b","ssdeep":"24576:zPKFDutcANMKrr22xUozAe63qJX3RgBbeDqSv64Y:zRLj9Z63n8u14Y","tlshash":"1c2523dcd6afc802f95353bd69bf4e93e4457334042661c4a3b671ab512cfe0929ca36","first_seen":"2026-07-29T12:57:29.424592Z","last_seen":"2026-07-29T16:17:10.978019Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1045,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/1c32123f93ce420aa5f5f8a590dd6d96.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.644Z","timestamp":1785330076644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/1c32123f93ce420aa5f5f8a590dd6d96.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 05:55:39 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1020759,"size_decoded":1005713,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"d54173176a3019bf939d12ef32ccb6c6","sha1":"9ccebdeae06b05dbdb40cedb82cda19495cd5bbc","sha256":"8f125425902534a5c41983c069456f6bbf55dd839fa4c63af043dfe119bd4bf6","sha512":"dbf5ccb6b1300568adc61ad29ccaecad87dab7dc1a44c183df8e8f753fca4307d225a129a4cb78868fffa984d5c3d0014c24e3b46f39e354ce61165bc493a526","ssdeep":"24576:4/JOFHY7iF1df9cA8KLQwrMS12aoTmZj+9h3f:4BOFAiF1dlfmST69hP","tlshash":"e7252398956dcd9efa7fc0fa022f0302c39e39cd5be284e1496891e46c978e1631db5d","first_seen":"2026-07-29T12:57:29.472128Z","last_seen":"2026-07-29T16:17:10.932063Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/27df6fd4d4264651b21216bd8633df69.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.648Z","timestamp":1785330076648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/27df6fd4d4264651b21216bd8633df69.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 06:09:31 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1165107,"size_decoded":1152169,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"b4cb1b48764a80ae4b789fe1ee305a7a","sha1":"c04f09895b53b84ea662cf7e55cc2f2e0ca80564","sha256":"6fa27d145534c1389dfe7cee539fb9e43da65d552819602933a45eaca9ce2bc7","sha512":"32884c6f5855edebaa0efeee71028dda2c6214122836cf1f41b15178c3607386e362d75db57dbe0bf06aa7d8fc101d9cbf83aa68139d3ea2e23b343c13b80e10","ssdeep":"24576:65MYiuoOGHNFEnAmtSaOwcn2kGt0DhhhVN2F2uf0o0wz:65WRtSAuSs8zVN2F2RFwz","tlshash":"bf25231eed9ed658c7ff603884057216c48e296b93853ce61dd1e2e699b53bcf06830e","first_seen":"2026-07-29T12:57:29.622968Z","last_seen":"2026-07-29T16:17:10.934805Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1039,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260729/68fc3663478845c78462b75adc5e7d28.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:14.905Z","timestamp":1785330074905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260729/68fc3663478845c78462b75adc5e7d28.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 28 Jul 2026 23:36:10 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3553415,"size_decoded":3441909,"mime_type":"image/png","magic":"PNG image data, 5120 x 5111, 8-bit/color RGBA, non-interlaced","md5":"45407dc320184335f3e601e1f46ee957","sha1":"c006f099ec75c6a8644ef9daae6188661082940a","sha256":"f39fc4b9cd2f90e20857ca09b1814bd70ca1e4a09831eb00ba1814e34395193c","sha512":"aa5d11ef173db5fe6f8fffe0c8653c8c1e233b44dbdda910863400dbfe0ed0c3be1516d23560f9b269121a4adfc56c45ffa9a8e53f4e61bd6cc6c9ded960668b","ssdeep":"24576:cMAJ0gywcMl+XXJpVr03hzoyLp7DF+InsuIh:RqBy8+ppwRDQIsrh","tlshash":"df252244a5bbc08acecf10b125a43f47851396a6d6c46eb2c6f0e1bcde84ee5316d74b","first_seen":"2026-07-29T12:57:29.570467Z","last_seen":"2026-07-29T16:17:10.906611Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1174,"timings":{"blocked":0,"dns":2,"connect":233,"send":0,"wait":700,"receive":0,"ssl":238},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/api/site-config","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.054Z","timestamp":1785330075054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /api/site-config HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: max-age=300, public\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1079,"size_decoded":1023,"mime_type":"application/json","magic":"JSON text data","md5":"66b091b5102e69f4b31f9ae335be7c96","sha1":"643b325ac5f10e9ba6a81b3c9d0ea02e4275e0ae","sha256":"c7f1f48c1f16a96edb41dfcd75f83af97b876f37c463ac3a6b21a01b115bdd63","sha512":"affb66f30bb4b205780214c506d2c447bf68d2c087fbbaf1002c34b5d02c8be1d69af60f146c45bfc33df10b00d7defc3fde45e336c2ee7cf6fb3c4f87643953","ssdeep":"","tlshash":"ab11f0dbbbfc8240031a3bc631cf959dcda6610bd48c9e6bd245bfac98e174b605b046","first_seen":"2026-07-29T12:57:29.352322Z","last_seen":"2026-07-29T13:02:10.812698Z","times_seen":3,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/css/chunk-8ae1bef0.0dba7e01.css","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.339Z","timestamp":1785330075339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/css/chunk-8ae1bef0.0dba7e01.css HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-615\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1557,"size_decoded":987,"mime_type":"text/css","magic":"ASCII text, with very long lines (1557), with no line terminators","md5":"0808bf008de14ec6a4c2bd189bb2e0af","sha1":"4defb944aa2910ecbf690ee2bf3ff3b740aab266","sha256":"0c0857754751e11a94f6528b494d2f01ab1ad8820340449908218e5a1fee42cb","sha512":"4c092476a90dd418a160fb10ce9f898b766229b5d77976eb5e2cbce5c61fde3d11e12959c019d7c2563c3069cdc375b89ccbff59fd5124551526f0b3822295a2","ssdeep":"","tlshash":"3c31a96330f1c93c2767f065f92dc1b871848222dd63a2d2eac861388cc72e342a5f0c","first_seen":"2024-06-01T14:29:20Z","last_seen":"2026-07-29T16:17:10.922687Z","times_seen":450,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/css/chunk-1051c767.b66e06f8.css","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.344Z","timestamp":1785330075344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/css/chunk-1051c767.b66e06f8.css HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-103a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4154,"size_decoded":1607,"mime_type":"text/css","magic":"ASCII text, with very long lines (4154), with no line terminators","md5":"f235a1dcb9956428fd97e18d6ef09eee","sha1":"6f6ffeceed3110952acefbb19764b36e87426298","sha256":"657b3b9460e9ae9ce77bd6d7f40a112b0b906ee4ecb2332ae8cae95234bf154b","sha512":"09aca8ab5000f96f6e048851c1de1d343d779e18b916179d8583ffc1c0f05d2ae209fc7e04f4bb8bf653f6351bd8bff478c76ef0e72eed5808b4d80cf389dd60","ssdeep":"96:xyJNK2UweZwfhv3kUINjWkwnQyzF8N0s+01RRAlA:xyJzveOfhv3kUINjdwn/1sJqA","tlshash":"3081523122195e1e38b3e46a21d1a1dcb20ca336e39287fede65901f8ada3f31731755","first_seen":"2026-07-29T12:57:29.609224Z","last_seen":"2026-07-29T16:17:10.928346Z","times_seen":4,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp11245/B01I9BUPK6/61cV%2B5vv%2BcL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.550Z","timestamp":1785330076550,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp11245/B01I9BUPK6/61cV%2B5vv%2BcL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: /NUrxhPkeDiBRMZcO1ib6Ro16RN5KmCkTtEpFxM4tIc7pbUUrSKlbvpo4+qYCTGT+qpMZgK4Upw=\r\nx-amz-request-id: VYS7KGTN1HVAMJE7\r\nDate: Wed, 29 Jul 2026 13:01:24 GMT\r\nLast-Modified: Wed, 22 May 2024 11:23:54 GMT\r\nETag: \"81729c361fe7d0089a4f2421c9ad9039\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 54354\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":54354,"size_decoded":54751,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1078x1500, components 3","md5":"81729c361fe7d0089a4f2421c9ad9039","sha1":"b9bc089888e448f40a64ba201b95db823d2fcbde","sha256":"00d87a8c6e20ccca44b7dfce2c0d396eabc847e75a5fcd89ff67cd41c3754e14","sha512":"cc42c3ce243f485c92ef6cd951fc6598a3cb9276b61195b5c84671cae12eb4472b5f3436a40c69c71571a680fbbe9fba823fc09ea01b70da5c9e2f01fb7b1c0a","ssdeep":"1536:hkbSHwGbySjcoCEgD5mbXvpMNwU4FUP+PS:C8oTNAb/iw2r","tlshash":"2e33f1efc1174866d9760b76163db1c6fb66ab2ea3570700bb060d30266b605d6e8333","first_seen":"2026-07-29T12:57:29.488187Z","last_seen":"2026-07-29T16:17:10.924127Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7599,"timings":{"blocked":7204,"dns":0,"connect":0,"send":0,"wait":116,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-11/785eada8-d02d-4af1-a638-3a11ff5c6452.jpg","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.570Z","timestamp":1785330076570,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-11/785eada8-d02d-4af1-a638-3a11ff5c6452.jpg HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5DmHICOo/5j2wW9KbUVgbVUzCemn/feIvFtKvjG8tASOG1llxO3Flco6QGzCHV45Q9yjktryX+nzCjXotu6V/W0b0SpB47Oj\r\nx-amz-request-id: 1EB783053T3XEZD5\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Thu, 10 Apr 2025 16:35:15 GMT\r\nETag: \"52dca0093afcc4db2c02fa06e8856542\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 56195\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":56195,"size_decoded":56650,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 581x572, components 3","md5":"52dca0093afcc4db2c02fa06e8856542","sha1":"25e344a5e3723ec78f183b6db0b36a478f13dcdb","sha256":"b2d803f4d0dc46f55940bffcefd81f31020d152b5aa2d8554f863a9f262abc9d","sha512":"22c8e169993be2449783dde9e12a4a9dd5e8b448ecced44559625c796f03035317ff996f123b0fe3e128e4210837d88a9b35c50663772f89a8975907b72ad689","ssdeep":"1536:Mg56rIAsyPqYgwOWNqcaADVOCnPSkXECxjVK6AK9:SdLqYxNd1zjVKtw","tlshash":"de43f12e26c1201cf11e7b7da972893c79a025fa101f91b91192e4b5e730ed67cfab03","first_seen":"2026-07-29T12:57:29.744995Z","last_seen":"2026-07-29T16:17:10.965279Z","times_seen":4,"resource_available":false,"data":null}},"time_used":908,"timings":{"blocked":784,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-17/464a6bd8-30bd-4853-bafa-ce99e545d982.png","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.577Z","timestamp":1785330076577,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-17/464a6bd8-30bd-4853-bafa-ce99e545d982.png HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Bo3K9cg2aK/Fz9BnW2eRq5RslRGaQ4YRJdI0y7KKVZwRa0hsapbtf0ujV5JpGZGVi84os+hE3TGS+o4VFAVQS9jsOlBs5GUk\r\nx-amz-request-id: 1EBEY1VKV4JEX28X\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Thu, 17 Apr 2025 14:22:13 GMT\r\nETag: \"006e23a0153fe8cdbdf9343d8758b5be\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 277489\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":277489,"size_decoded":277945,"mime_type":"image/png","magic":"PNG image data, 579 x 578, 8-bit/color RGBA, non-interlaced","md5":"006e23a0153fe8cdbdf9343d8758b5be","sha1":"5c1aa833e6261cd4529ef2979303813b275e8df8","sha256":"b8632905b94a3d59aa1da200f527ab7e3992c24553a90eb9af079976dbb88f99","sha512":"431e21e6737e6c4187bf5279e4e756825d9094470ba6f007cb070f0974c8d81ad127f81ba0095758118c6cbe490fb3600cbb35474361ae67d3735dcb9545e623","ssdeep":"6144:wZUaJ22/0gokvWDHueH4QWL5JEH6hY1jQ3vAs8SpbkiLzl/4CB2yKbxKbrL:j2/Jo3HvHg5JEH6Z8SpbkiLF4KUYL","tlshash":"26442320f31cf9f9d7da967a1f7705f18f629890721acb440f72b250a4279f94981a4f","first_seen":"2026-07-29T12:57:29.847128Z","last_seen":"2026-07-29T16:17:10.977467Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1051,"timings":{"blocked":927,"dns":0,"connect":0,"send":0,"wait":120,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/css/chunk-vendors.2e73b441.css","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:12.906Z","timestamp":1785330072906,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/css/chunk-vendors.2e73b441.css HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-5df3\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24051,"size_decoded":4583,"mime_type":"text/css","magic":"ASCII text, with very long lines (24051), with no line terminators","md5":"93069f9f0b13986482842826ce47d2ac","sha1":"ec02e7a5f201022b4e1bad556ad6512dcd0cc820","sha256":"2b37d9374e4fd93e01f9e53b9c4eacb89cb79239bf69df96d3a0c4e7c3da7f26","sha512":"616d28ce987913597fac0fd484eeea72447ab475b47c422ede6ae43b848962415b5fda4a97433ad7dec3cddbf805dcd081db01d1523a93fd20bb123659b555b2","ssdeep":"192:l4fah1ucEwa9bRVKEh7Osh2yvppHB9NDUm8XVTynR9omO:nECU1BhishNv/HBL98FmnE","tlshash":"bab2072909b2242df937d66271a08e8937378007d4368ffcd6957f6c53822d59ee3da2","first_seen":"2026-07-29T12:57:29.732184Z","last_seen":"2026-07-29T16:17:10.944456Z","times_seen":4,"resource_available":false,"data":null}},"time_used":924,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":924,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260729/3d67b4c3acf741f8942717301826f3ec.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.886Z","timestamp":1785330075886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260729/3d67b4c3acf741f8942717301826f3ec.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 28 Jul 2026 17:31:03 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1175129,"size_decoded":1156499,"mime_type":"image/png","magic":"PNG image data, 4096 x 1275, 8-bit/color RGBA, non-interlaced","md5":"956ce7e4251c4a6bcc8eabd37ac83a29","sha1":"a3f2d344245539a0edf82b72a37a1f02279c23df","sha256":"a62963afab6373686e82c8457709b113e87c28cf6c0ff160d09490d80a66ccfc","sha512":"a81bfe9db3555e8abf39377829c32a6ba26ee0424db2dda756e74f4eebfb482406323be87ecbcee9561530b87a89bedb3efc8946e3fa2883df604c70639379ab","ssdeep":"24576:bh79uQttcur8cgHYB1O1BDt/v4XPK8QX5DPPrjRLN4BuFiKeE5lnn5FIYG:bhAQttcgaU1ItDUqiPseYG","tlshash":"8725238ef06fd89ccedf9230db0abf82499bb05db98149b1ca70918ee517fd96410716","first_seen":"2026-07-29T12:57:29.445494Z","last_seen":"2026-07-29T13:02:10.759115Z","times_seen":3,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/wap/api/index!download-url.action?lang=en","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.908Z","timestamp":1785330075908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"POST /wap/api/index!download-url.action?lang=en HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tiktokhkg.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: application/json\r\ncontent-length: 31\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tiktokhkg.cc\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline;filename=f.txt\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31,"size_decoded":607,"mime_type":"application/json","magic":"JSON text data","md5":"4f41b84c24c684f47ab24c0c08c8eceb","sha1":"56d5eca54d3328a7083912ac8adec4727c53bc24","sha256":"4dda673c7fb377ca5d6b0847da8b64743d31df006382c3763249eb18e0e0c12c","sha512":"4dbf3c78edae8d2a7ae31aee4fbd3319fce4e277b842df39ea3db2e7c16aa0a6521ac3d01500196da7278dc4e112514f65203e469a8f758890382fe2c624e378","ssdeep":"","tlshash":"b2800000e82e88030c038088a08c228080a822e000a003000caca230800c0e22000830","first_seen":"2026-07-29T12:57:29.430209Z","last_seen":"2026-07-29T16:17:10.960586Z","times_seen":4,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/img/pc-side-6.93beb7ae.png","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.588Z","timestamp":1785330076588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/img/pc-side-6.93beb7ae.png HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-1aa99f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1747359,"size_decoded":1604672,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"06bbbe649118c7499b7f58c6715bd07f","sha1":"79cb40937d3f35ea9f1fd56441d5a412fdce7154","sha256":"679d2ffe9d8d96480b3e2efdfa18dee78e47fead98744793610e4a34ff33af93","sha512":"d9ab701287d9a058ed911dc74f62a1e4bd50e0270bedf915facb806322f49c9e606ba8d1825240056180c38460a2009bbafd68656756354372adf73a02cacfc4","ssdeep":"24576:K7aA919Ux6ymu52gNPqUu2TF6uTum2EF6bXjAvfd:B+Mhmg+buTum2EIbXjAvfd","tlshash":"8c2512929031c946d59221fd0536f9ee8a9d4b3df22190a4ea71df8bbb7cdac090d70d","first_seen":"2026-07-29T12:57:29.697826Z","last_seen":"2026-07-29T16:17:10.910043Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1062,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1062,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/510ec1434747457292370c6d8fc61e25.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.636Z","timestamp":1785330076636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/510ec1434747457292370c6d8fc61e25.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 05:51:15 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":777855,"size_decoded":763520,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"06eca8d47fcce6ec153bbd67a872a158","sha1":"2cdc6cfb9980682c039813ceb3d8ed48863ac5ea","sha256":"8fe101f12a7d4fd8138647a583490762181dd63465226a635c765f05f0798e6e","sha512":"9d7355e1601598d1f659ff89451373d5f3d088e67dfe5771462b4b7d5f13b2e3fa3ae49dc04a24c523aa134cd4c3b29464e44f111e7dfa418ee40cdf5c3d6c70","ssdeep":"12288:FbyGg3E1Dtxz+71eUbae1R6i8K+EEbjakhySiXWOClE9ZSq0d6WiIKAQKNMuR:sGdptxy1zQil+ZfK78lqOt2uR","tlshash":"32f42384c0ed978fd9da617dc2a118d69ee46957dc4dfe8184b0f080b9104fdfb2ab86","first_seen":"2026-07-29T12:57:29.735896Z","last_seen":"2026-07-29T16:17:10.973211Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1050,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1050,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/css/chunk-elementUI.6b92dc4c.css","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:12.903Z","timestamp":1785330072903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/css/chunk-elementUI.6b92dc4c.css HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-338d3\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":211155,"size_decoded":35476,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e1ec7b3d258707dfa59963f29e6f8e75","sha1":"4f5bc4f0fe61f591e28ee36aeb7225face58fdcd","sha256":"dd1f9346550174f9e13cf5bde56e170cf73b9b703a46f0335435471104a3aba0","sha512":"2c4dc449a988f588060850b8d9cdd6eb28c00c26e0b17d938f9904f7331979d66f74b806a5f457dc13d5a3593ca04bdac41699603e3c412e241b82ea715aed14","ssdeep":"1536:w28Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e210kSDDvIc/ehB:JtKw/27eDLL6of","tlshash":"0824a710db17247b622bd66db4c0ba896f24c363d8725b3bfd95741cc6e64891223e1f","first_seen":"2023-10-20T10:33:29Z","last_seen":"2026-07-29T16:17:10.932512Z","times_seen":110,"resource_available":false,"data":null}},"time_used":698,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":698,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/img/no-cart-item.f443833f.jpg","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.314Z","timestamp":1785330075314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/img/no-cart-item.f443833f.jpg HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-5f0f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24335,"size_decoded":22153,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 381x401, components 3","md5":"f443833fd2d95a9d286d870a70c98f27","sha1":"d37f03275d7d14db74beba1d896dd84fbc5de807","sha256":"c30c155f761de00b135537b891742b45ed9c1dae9139413459f35d10b59ba5da","sha512":"5405fe9db176b23f52fe8716df9d476f401f0f22f09d4808cf6175a9a78cb683da8d613116dede448cd493c31a5b1cb5e00fd444be73f9e7921269f89d63ce12","ssdeep":"384:lFgkBjCvLSQ+DzN4HQFOxIf1ydiUGSysL44pf73qa+0StBIV2uI:lFgkBO+tNVFOxTdkSr44pf73qWStBIV2","tlshash":"1ab29e07dc04ae1398fc57b5bfaaec7d7a0a9a0ce86775ea04320d863a351631c5e09d","first_seen":"2023-05-26T20:06:53Z","last_seen":"2026-07-29T16:17:10.974243Z","times_seen":103,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260729/925116029ec2439898472be3bb4aad46.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.903Z","timestamp":1785330075903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260729/925116029ec2439898472be3bb4aad46.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 28 Jul 2026 18:20:31 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":649440,"size_decoded":644852,"mime_type":"image/png","magic":"PNG image data, 1440 x 1440, 8-bit/color RGBA, non-interlaced","md5":"aa5d47075b9c01ffe9b6b22724bb6e9d","sha1":"6d1d76f2fbdae3506da1bbb65e6375523fc3ef7d","sha256":"0b4a01c8d81f220193f87f307edc6ab3f933b0de65ad8e91a5bdb761076a5f31","sha512":"2ac50befa72801e7ae1b09eeb67cb25e4aef3aa6caa085509a702a9c0d2914ee50f44f64bd0b50d26ef88d265eb58bdfc0bc331daef06966df069b2ee99f4c42","ssdeep":"12288:wVE2TeRhSNQKlOuFAb+JQzRnzR3hWNuYWOqXOnAkx4ta5tlQ33bgrKuc:wNTAMQKTqbBYNuYWC4alUKKuc","tlshash":"b5d423adedf2a5721cab4237c4f0aae8431579ae962355bd145cfb85ee0843e431834f","first_seen":"2026-07-29T12:57:29.428044Z","last_seen":"2026-07-29T16:17:10.912758Z","times_seen":4,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=en","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.911Z","timestamp":1785330075911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"POST /wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tiktokhkg.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tiktokhkg.cc\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline;filename=f.txt\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4044,"size_decoded":1704,"mime_type":"application/json","magic":"JSON text data","md5":"f52d5c1edfd550bb2917f193e5107d46","sha1":"78df35f558a559e1e965e5187f7db27b1500c639","sha256":"338c3438d06457ab45f3c3009af37c92e052777b66aca39496a451fb27b0fe87","sha512":"9218445590a4580dec7887031ee2c8e7adc1209c2f2463b262f8621777b9aed34fc3a12a09e13657deb011505f1ff5b105c9412bff8dc3bdf073454046b3b611","ssdeep":"","tlshash":"19819bfd07aceddc07056dd032e7459f18b4b023e5932dcba5a9eda1ca54782683f1a1","first_seen":"2026-07-29T12:57:29.392544Z","last_seen":"2026-07-29T16:17:10.936293Z","times_seen":4,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-05-20/1b455385-d5f3-427b-9591-9dcc40dd3f31.jpg","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.547Z","timestamp":1785330076547,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-05-20/1b455385-d5f3-427b-9591-9dcc40dd3f31.jpg HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: yTB1iOPdPK9ZR5zwuwfD0WPBYEHgzIFDeu3CzJZBBUrv/FFJRdUsjfVAGA14R7jRDtB1AFr4MYi3ZV3+CWkNQDtRrW+8a26y\r\nx-amz-request-id: 1EB65W04X3FWR8Y8\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Tue, 20 May 2025 14:30:55 GMT\r\nETag: \"f7785d7c23c41f898d0e1653e71ed9ed\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 48002\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":48002,"size_decoded":48457,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"Software: Snipaste\", baseline, precision 8, 589x588, components 3","md5":"f7785d7c23c41f898d0e1653e71ed9ed","sha1":"5505d56e0860b981bb10dd527d20a2b4ef2a34e3","sha256":"fe16465a786d52dd55d159e21c22136c0982bae9f55ece53b89d5d8c952187af","sha512":"993637dc77c41d02e9ece735503983bee87a28ecbfa1a305267c1b99e3e69c2051a13b1fb927bf92eef27c0f2e2540388d60bee1f6fde0fb93e66a4b7af9c726","ssdeep":"768:XqRsPUVLzbonj+9a50FqmP8ud7vddXxUW8RDYUUhS2Vf9TuAwHkfbnA0j:XKssZcj+9aR8hZxb66xuAYkfbn/j","tlshash":"e023f143c0690fd6b41c4bcb59019fc939cdaf660c81b883259da9b4fef9261354ede4","first_seen":"2026-07-29T12:57:29.734965Z","last_seen":"2026-07-29T16:17:10.953386Z","times_seen":4,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":609,"dns":0,"connect":0,"send":0,"wait":119,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/img/pc-side-8.37d7ab5f.png","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.591Z","timestamp":1785330076591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/img/pc-side-8.37d7ab5f.png HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-22de9c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2285212,"size_decoded":2159168,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"00e2b9e027c032880c9e828f081f307d","sha1":"b1f989106c1bd6c89d3dc74a3ac23286ef428aa2","sha256":"40746ed6d0fc50dc10b86f3fa6f7000bac6047a62c569aaa9eeba53aa47235ef","sha512":"7d05c99fb6e4ec5b3d0af224ce1721d085f5f43806bb1dc3766d7a6412791b29651d0f5290180b0bc5e53cafcc4b097ab4d7472665de63947dafe259603b9368","ssdeep":"24576:TqJF07v//COw6UbMppYsTKZza1RYL1ZzhiEC/GKAxEe:4KqMHJSzPL6A6e","tlshash":"2e2523b3b832b744c56661fc827a669a065e636d2e005350b8779299ef3cf740b37f06","first_seen":"2026-07-29T12:57:29.850656Z","last_seen":"2026-07-29T16:17:10.954664Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1060,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/img/pc-side-4.46417d58.png","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.595Z","timestamp":1785330076595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/img/pc-side-4.46417d58.png HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-172d51\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1518929,"size_decoded":1351227,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"5c274f42334300e08fa8f8ecb271204e","sha1":"c24615cf214c4ff82da0a89bdd52292be4aa1a1d","sha256":"355ec827396f7cd01a7b7dbd84b066fe3f6066c5c49785e34aaefdb2b0587025","sha512":"3602de595d4e3b5ba8987e09e993501c92d3c150919d95d3da48f9b648445a0a2f85ae4f1445fa4031100958253724e7248c571e3cdcaf6c3010ba1c8b2a25fa","ssdeep":"24576:ICsoKh6beq0ddUqhOgYs1HmTWox1JqjW8v2:oxfU4mTWo0jWt","tlshash":"042512b39027db0ac0e379bc195e591147081b2da2936089c676f37f93b9e75860eec7","first_seen":"2026-07-29T12:57:29.277092Z","last_seen":"2026-07-29T16:17:10.981617Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1057,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1057,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/css/chunk-75cc1552.b34d831a.css","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.336Z","timestamp":1785330075336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/css/chunk-75cc1552.b34d831a.css HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-1df8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7672,"size_decoded":5430,"mime_type":"text/css","magic":"ASCII text, with very long lines (7672), with no line terminators","md5":"d6c18b7c3ad552f951544233405f3496","sha1":"ccc8b7ebaeebcef0b903cffdb9bf8ecfdd94a26b","sha256":"02d0683e87eb5cde70ce2b1c6208266c0e00cce15fa16c213adb568eda20449e","sha512":"a478384cae41f037c4293bc84c3db42794511cdfbfc49ff1fecaddb3b9d770ebe0514446d49cd8fd590974ac6a012afd5287e958e7390159ef2e05b4218decc4","ssdeep":"192:IMEiCKMM9R8AsmAS71Xexlnsv0lfFS9ofSm:eiCKMYOAsaOxlnseFS9oKm","tlshash":"9cf16cb2a0b65408f337ca6a26f4d0fc3854db16ede5c3caaa663024dcc77a34556b4d","first_seen":"2024-09-19T14:26:56Z","last_seen":"2026-07-29T16:17:10.97026Z","times_seen":346,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/0f09ae80881f4f14aa309c8b16ae0531.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.102Z","timestamp":1785330076102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/0f09ae80881f4f14aa309c8b16ae0531.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 21:58:28 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14732,"size_decoded":14765,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"4f38525793ec402ec2546845b78e44f7","sha1":"ba5f7b06dc518ae4e8282eb2f348796b03c4bfd2","sha256":"03e58373272cd73a49b9caf5a5d22c18ffb1640b5202cc584e99f5fead1dce7e","sha512":"e03270ed7818678c6fef47de0c5ee4d9189133f428ac7bc0756b5a95833842fcd5b4541932717091cfe28d7ab56808f69a1b2b312bfa1d84075439eaaf17e44c","ssdeep":"384:USwribtyxbR6cjPk6NKosHVDSsR4NfUBK:U5eJyxt6+6PH0NP","tlshash":"5c629e4212212894fd63bf35cd95db81cbb4a328a5bc37e8660c8d257a3158edf6f513","first_seen":"2026-07-29T12:57:29.744009Z","last_seen":"2026-07-29T16:17:10.902652Z","times_seen":4,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B07DYPNX8V/81SXlmumkgL._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.537Z","timestamp":1785330076537,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B07DYPNX8V/81SXlmumkgL._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: S2rBW0KkKOsfr3Vulwl3EC1nUnqtlYWy4dZRnRhkQKhqaryzk44cWEUIzFd0q3D5fo8YMhMEQAU=\r\nx-amz-request-id: 620V5AWXH6HGN2F5\r\nDate: Wed, 29 Jul 2026 13:01:23 GMT\r\nLast-Modified: Wed, 22 May 2024 01:17:56 GMT\r\nETag: \"28691063bef03ebebb5bd5d5d21b9e19\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 221558\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":221558,"size_decoded":221956,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"28691063bef03ebebb5bd5d5d21b9e19","sha1":"3a1cc757b5628eb649ca3737b8354764267a318b","sha256":"63152dcea82d54c6d7327c66f730e4a5cc865f6c10e492af595bb963899d806a","sha512":"b917ddfbfd937bd557ca012209ed7355be30f0fa601251e8273ba44ec21ab11c69395b37bae20e69a16215a63d394ebd60efe3c8717dd52566126e0a1db35f75","ssdeep":"6144:MfwxatshMDOBDDGlTXdFPi8zlDpMOuxEwRZSbbeOfNnsS:Mfwx1h9hCTXdLzle5xjRxkNt","tlshash":"34242311810257d6fae4e5b62ae3d73ef28872cd75b6ee4602d66066013f636823f847","first_seen":"2026-07-29T12:57:29.723156Z","last_seen":"2026-07-29T16:17:10.982163Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7439,"timings":{"blocked":6316,"dns":0,"connect":0,"send":0,"wait":121,"receive":1002,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/1b528541cd4d416f832e6e393c5e66c2.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.634Z","timestamp":1785330076634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/1b528541cd4d416f832e6e393c5e66c2.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 06:35:40 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":328834,"size_decoded":318376,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"39c79d59d8e04a1eeb741bb320332930","sha1":"b930e0b2e5131a0975d76a319452dd7e97165eb7","sha256":"2883690df18158a4655b8a58f031b92ece349208464f914c4192ee59490c2585","sha512":"beb3282aa9aa7fcafd790ffb2485791999d5fde2e9670a04919e99b8077cc671f839061dcbb0327413c234cb960cd5fdd0f6f45312aeab6996db3520f325debd","ssdeep":"6144:rAYHQrWQEeafPTdLIRuktcjifvlonFHfJm/R22vJV72ldq+/heR:cpmVIRuktcjiHW9u/JV72TgR","tlshash":"81641347a88d9e93cb0f50f0021646f3e54f1a9103d5a76b2f9db3da8c2d7856e83a5c","first_seen":"2026-07-29T12:57:29.289293Z","last_seen":"2026-07-29T16:17:10.957451Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1051,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1051,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0C29QLJDM/51rT2UPISGL._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.534Z","timestamp":1785330076534,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0C29QLJDM/51rT2UPISGL._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: IuYMsi/NH652WiHA/V5aqG/kyC7advK90YaKDVKEtA8f3iK6wTPEOjdtN4bckv4w2mEhPX+kC1o=\r\nx-amz-request-id: 620HF028JCZM3EKJ\r\nDate: Wed, 29 Jul 2026 13:01:23 GMT\r\nLast-Modified: Wed, 22 May 2024 10:26:38 GMT\r\nETag: \"f21d9b077579c3f64770654208de26ea\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 55260\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":55260,"size_decoded":55657,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 519x1500, components 3","md5":"f21d9b077579c3f64770654208de26ea","sha1":"82b090fbc67c3e57f5ff50b4f8b5a2b359595f6b","sha256":"24b125c9652d866f0730ac2c05a2db2b2138422c9566e560c4a7a01f2db4cf81","sha512":"adc1624ed0a39982a3644c91df645c4f85f6620752e15abf31760cbc9bb4d6f17488a8e3025b38094e78d2ac984758043115e858822717eb28b0097efc8843ce","ssdeep":"1536:Qy+yYBH/QdNHC+wa7ClOkypeUANW3reEIkAT:Qy+fB2C+TnpeLNSreEGT","tlshash":"2143021a36c04b2be4721f31c5b33d8fab698b348e53d256265287d3035da6968d0e6f","first_seen":"2026-07-29T12:57:29.795298Z","last_seen":"2026-07-29T16:17:10.975329Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6320,"timings":{"blocked":5830,"dns":0,"connect":0,"send":0,"wait":117,"receive":373,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260630/d2ef68cce2c442bc9be2d8ea11c2aca9.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.653Z","timestamp":1785330076653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260630/d2ef68cce2c442bc9be2d8ea11c2aca9.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 07:03:07 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23953,"size_decoded":24146,"mime_type":"image/png","magic":"PNG image data, 280 x 240, 8-bit/color RGBA, non-interlaced","md5":"aa9a5f08afb2deed050447f4786c9be3","sha1":"e2936194ff64ab138d94dea27d1f38785065dabb","sha256":"83dec6fb9ba93bce0d7eca1ffddb320f8acc3835f9fc919e19624cad55ac916e","sha512":"5160ebb6bb479c7432f71e1dd6d148d68839ed8f996a2186efeccb9b48a88acc95924113c1ca45f3b56c84064a8a00a8745becb85bfae344529b53fa612f2b26","ssdeep":"384:S31d6c9UVBzZcRoWWeMlHOHYWISb5g20miOHM3YSRVbGLqj8moBARlOlb:Y/SVBEoWWeMlHOHrIP20XFRVKLk8pAR4","tlshash":"cdb2e11e0677ca008ed39d183e53b4797a790f0604735ca40e46e9d6288b3ed6f6a1f9","first_seen":"2026-07-29T12:57:29.498327Z","last_seen":"2026-07-29T16:17:10.91994Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1324,"timings":{"blocked":166,"dns":0,"connect":0,"send":0,"wait":1158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/css/chunk-e0b1cc06.9bb8bce5.css","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.347Z","timestamp":1785330075347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/css/chunk-e0b1cc06.9bb8bce5.css HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: text/css\r\ncontent-length: 568\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\netag: \"6a677b4f-238\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":568,"size_decoded":1003,"mime_type":"text/css","magic":"ASCII text, with very long lines (568), with no line terminators","md5":"337be26701382bbc7d2091e831b31931","sha1":"76911b522a825c866ae575f745b692e390fb7547","sha256":"cc89d24da962877cdfa29136f6b2a8e06e67da5d5ab948ec198f2a27d7931fa1","sha512":"cce44f1e37c41f9898138c090c6e0b6e012943a7ae7cee44f295befb1bb3d6fe81772367017526aa339f50a9c60d00345d70691b8e9dd9a21cd8d8306f7a8fae","ssdeep":"","tlshash":"f0f081b010689b75dabbd184b6d61d28a601f503e14647dd3f10492dccc7b6233e97ae","first_seen":"2026-07-29T12:57:29.746197Z","last_seen":"2026-07-29T16:17:10.950903Z","times_seen":4,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.907Z","timestamp":1785330075907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: application/json\r\ncontent-length: 56\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-disposition: inline;filename=f.txt\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56,"size_decoded":529,"mime_type":"application/json","magic":"JSON text data","md5":"54a40be05c95dc3db85dabcea5fcc650","sha1":"2f1fb97e3e152b3cff2ee8743ca7ed142b5263fe","sha256":"0ade897d9a9b20ca7138f9790be3b3853dce01d43a50e9a1b9a8ed022eb6f656","sha512":"f5bb72add90121dbf7b5d4e0aa6528151badcf72a0e31a50c2f20089da07ad52a709845226b33aa072036e2bd4e51da0b72b2aa1274f17624927691ec48c8d98","ssdeep":"","tlshash":"0a900200947d442708b35488786d25948a1a629044a01a146f99e164408945d2004439","first_seen":"2026-07-29T12:57:29.448371Z","last_seen":"2026-07-29T16:17:10.951473Z","times_seen":4,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/1f0466529cfd4931a250fa7a5de40f31.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.106Z","timestamp":1785330076106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/1f0466529cfd4931a250fa7a5de40f31.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 21:58:37 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4906,"size_decoded":5033,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"8a46230bfc89e9f6c41fb7b3da780d98","sha1":"4fd041ce188af19c49daac8b24238b03cee6e7e1","sha256":"bf658664a021308bd62ac6f061876b6152ca85649e95c54e73621cab0a24dc17","sha512":"affa9d736e17f00df9e2c58505f5b97983d5c3564970fe8ed4d0a3099573d21ececb21807501899a6e2636f47eb1c9efc7198235ff3b582fe5072ba4704f9a6f","ssdeep":"96:CeeOMrd84FdgsUaNu3rQ4HZCXV9qz6fMbCiNmywqjP:CefIi4FS9DCXV9qSMbCi1lP","tlshash":"77a14c027bb03baf783f10d5e21cc407391e8ae948133762a402bfa9b584947edbc199","first_seen":"2026-07-29T12:57:29.835457Z","last_seen":"2026-07-29T16:17:10.971912Z","times_seen":4,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/7fcad0416ede4a51a3ec81f924ad2392.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.113Z","timestamp":1785330076113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/7fcad0416ede4a51a3ec81f924ad2392.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 21:58:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31741,"size_decoded":31912,"mime_type":"image/png","magic":"PNG image data, 245 x 245, 8-bit/color RGBA, non-interlaced","md5":"493b11538741ba8966a27a1c70ad2e24","sha1":"9cc5324edc05790ab691b503bc88a3ad0afcc371","sha256":"6119680451f5f915e5538dd1d5346256ae30fac96cff8b2ec770f8bb2f69b074","sha512":"91217933aad669f25c2e1eee0c4e29768f2b44fda43e98ea5daefd5289daf417aaf9a20f1583671b6d0fd3ceceaac50eaf14e36f66f568b3648f4b2995d3eb07","ssdeep":"768:gOg9lOx5ewS5Ztrb8mQfpSo50NnH2SoWzqpt/g44sGZDCtvt53lM4:gO/U5ZNfa22szcMJ2lJ","tlshash":"4ee2e0a8d126f7e66c13cb56faf26e36f444036e8a73d46a8e5da43c03143a359c917c","first_seen":"2026-07-29T12:57:29.433977Z","last_seen":"2026-07-29T16:17:10.908642Z","times_seen":4,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-swiper.68ec9a3d.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:12.910Z","timestamp":1785330072910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/js/chunk-swiper.68ec9a3d.js HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-1fb82\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129922,"size_decoded":36121,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64542)","md5":"458ad65e063725d6050332e4e2c8da19","sha1":"0d72b9b3a8df8a718fdb30c4a6680b6dc10b7fb6","sha256":"1ca606418187efe4944c9a216f1542d8d0209e675cbaadb6a17f0582be78aded","sha512":"d409bbb3e07171f345f08f3eb8b013ebdf4ddd588c69f6d2b5fec9d172aff344eb8fd501e010c5a1b68e36389b2f3e4a2fe967dad1af142dd56d664bcf1dc8df","ssdeep":"3072:HGwZT8uq042rYVmTVRzaacqHOyrTYcTeGy4I6m6Rk:HGwZVq042rWmHzaacqHOyrTYcTeGy4IP","tlshash":"fac34b4a931075a241fb624a938cc651a3f25445b80ad5bc31b68c9bb97dc5c03feff9","first_seen":"2026-07-29T12:57:29.873866Z","last_seen":"2026-07-29T16:17:10.920486Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/css/chunk-77eec948.55754a53.css","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.301Z","timestamp":1785330075301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/css/chunk-77eec948.55754a53.css HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-37b2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14258,"size_decoded":6782,"mime_type":"text/css","magic":"ASCII text, with very long lines (14258), with no line terminators","md5":"be2e7847f2c2cc4ced8521be35f363b9","sha1":"05d5f4e7beb28e78d4e9d6bcf8d6e409a61b023e","sha256":"9bb3368aa7d3cc99d515b203fba8883590ecf7556c6bd2028b9e473a1c0216a7","sha512":"032ea10da8ecb88ea8fcc89cc9e132b92f4d29d36c808644ffc95fae902c0f673d5b863e70dae4a7b3cb475d69fa1c74c94af56d1f4ee6311000fa8c8c65537f","ssdeep":"384:eiCKMYOAsaOxlnseFS9oVrkV9vDkFcjU/a+:eizHO3/dVAjDkFcAC+","tlshash":"42522a73a0609629b5f7d63d39c8948f7051ea03db16c29e5d2ab11dc0cbba3927634f","first_seen":"2026-07-29T12:57:29.867028Z","last_seen":"2026-07-29T16:17:10.925166Z","times_seen":4,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-05-06/a99ec1e7-c6a2-41e5-8818-2c5857b3bd78.png","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.500Z","timestamp":1785330076500,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-05-06/a99ec1e7-c6a2-41e5-8818-2c5857b3bd78.png HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 0o3WBaJLMu5bzCcL2lhdwYPkfibpGEdG920z9j2AU5LMz9QhIxn8ZO+D3VGSc8d5++nVNm7dl1ebrqzwr5XvN/z9W3Sv9xwR\r\nx-amz-request-id: 1EB98YXN7VSMJ8Q1\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Mon, 05 May 2025 16:41:18 GMT\r\nETag: \"1306825d849968b9e038158f7139fffe\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 1374087\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1374087,"size_decoded":1374544,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"134605e42fe4faefef558655824b4398","sha1":"7ca50b098debb17863518ccb9983eb1582da1859","sha256":"789385a31c50d105ac0273d60371b3d7d9ed2a3fb6d440cdccdc11d2a8018b0d","sha512":"7005c36a360a2bafbc5ed039100631f7ba233ccd48945723b55239491bf6e5be21e08179a01c196fa8f4da77efe7404161a1bdd9316dc707217968288f5f0838","ssdeep":"24576:D/74E2SS1z/U1ZBVWoxVZ4OSKwjD2bzeQG2zsLxdZu9p:D/8E2SSFUrBdxVZ3SLjoeQG2O0","tlshash":"542523b1ea40639ddf8b4b7d03ee7c7a7a143ac6fcd0415324271e4a4a44f5268bbb85","first_seen":"2026-07-29T12:57:29.507Z","last_seen":"2026-07-29T16:17:10.943829Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1418,"timings":{"blocked":-1,"dns":6,"connect":95,"send":0,"wait":156,"receive":562,"ssl":599},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp11245/B07V7JCHSQ/81o8tg4rpjL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.556Z","timestamp":1785330076556,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp11245/B07V7JCHSQ/81o8tg4rpjL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5N9mp17ytzF9I07bmpD/hePDM6rvllEpTbelrTdY0GtSK2Ck8VkVB3z0gfdq17n6wxgPPEOlllQ=\r\nx-amz-request-id: S72PA5WBCT6WR90K\r\nDate: Wed, 29 Jul 2026 13:01:25 GMT\r\nLast-Modified: Wed, 22 May 2024 11:27:40 GMT\r\nETag: \"7481c59a8577a60fbb6d43947a95cb9b\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 138778\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":138778,"size_decoded":139176,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 892x1500, components 3","md5":"7481c59a8577a60fbb6d43947a95cb9b","sha1":"e7bc08d38fdff4706ecfa93aa932e58dceec2dd6","sha256":"76f2b3e14881b11b7aaf6d73bf8b4de36a0a96e149efd71500ea8f5bff36443f","sha512":"c39e8e5e601df08bc569f218de6288f9964aff6ef92d1f692fa2484ff74f5948bef2fdca173169042a7f9a8c09d620f3a5509d9ac6c93b41d0e18ea72410f8af","ssdeep":"3072:0NGQuzu5Mi19SQuMWibQx8pgGbOFqGqnL07iaF:bzulS+A8HO8yl","tlshash":"3ed312ca113b3548f7871d33173aa3a5524773b2a5a0b266036cb7a74c9b342dcd9727","first_seen":"2024-11-18T12:40:32.46181Z","last_seen":"2026-07-29T16:17:10.979919Z","times_seen":43,"resource_available":false,"data":null}},"time_used":8102,"timings":{"blocked":7616,"dns":0,"connect":0,"send":0,"wait":115,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/mobile-redirect.js?v=Mon%20Jul%2027%202026%2023:36:34%20GMT+0800%20(%E4%B8%AD%E5%9B%BD%E6%A0%87%E5%87%86%E6%97%B6%E9%97%B4)","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:12.898Z","timestamp":1785330072898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/mobile-redirect.js?v=Mon%20Jul%2027%202026%2023:36:34%20GMT+0800%20(%E4%B8%AD%E5%9B%BD%E6%A0%87%E5%87%86%E6%97%B6%E9%97%B4) HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-b4c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2892,"size_decoded":1879,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (528), with CRLF line terminators","md5":"5d863f2d78ce34fcaaf07aa57bbbc5c1","sha1":"21d01903c4c93e31e03692d4e05f83d74c05fa2c","sha256":"969ce691d676eade2023a5247747dd88dee03728ab6d192d6c147f9f994014d6","sha512":"6a639efe9f9996d355232ba615bfc5fb0b28cd78062459f3108086dc1de143985700f9a1d8c65f00127892a053670936ea16de217fdcc8faf9d409b95a1084b4","ssdeep":"","tlshash":"955173d929c27046157327789d1f6224fbb385bb052ba490756592203fb062bc77eecc","first_seen":"2026-07-29T12:57:29.626037Z","last_seen":"2026-07-29T16:17:10.955497Z","times_seen":4,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/site-head-bootstrap.js?v=Mon%20Jul%2027%202026%2023:36:34%20GMT+0800%20(%E4%B8%AD%E5%9B%BD%E6%A0%87%E5%87%86%E6%97%B6%E9%97%B4)","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:12.901Z","timestamp":1785330072901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/site-head-bootstrap.js?v=Mon%20Jul%2027%202026%2023:36:34%20GMT+0800%20(%E4%B8%AD%E5%9B%BD%E6%A0%87%E5%87%86%E6%97%B6%E9%97%B4) HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-15a6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5542,"size_decoded":2295,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"cc915759225871878edce33c4eb16a9a","sha1":"18420de9d29a29c0eb08d87a6ee3c612a5844eba","sha256":"aed7797617924f404ffc316647accd2903a78435a02d36458cab7c9037c305c2","sha512":"a7bb737afe533b0536126c10306143c3fa86bc3d3432e7b80b9bb8788a12d3c5b39b15be80de4a985689d8ab73821e538cc5fa695f1589898ee0e43a3c604ee8","ssdeep":"96:32ZBOUCeoD7/9hfXBS464ojdmfauXZi44Jigeo6CepMbuBKEH/QXRBj:QBNoD7/9hPBS6q8Xjab8/mRV","tlshash":"d5b174d9658228626633b339d8eba108fe33117398b2e510f56c90113f7594ad37bfe8","first_seen":"2026-07-29T12:57:29.522153Z","last_seen":"2026-07-29T16:17:10.902025Z","times_seen":4,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-75cc1552.dddc4fdb.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.337Z","timestamp":1785330075337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/js/chunk-75cc1552.dddc4fdb.js HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-23dc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9180,"size_decoded":4820,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9180), with no line terminators","md5":"03490b25f0eca569957ecdad87915feb","sha1":"1eaf6e906eed1fbf928fa7846e89f39393c75a9b","sha256":"c93a599836fd651ca196292e9acab266999466c381cf453c01d6203e7192c7a3","sha512":"283a7248426c431b243e72f15e15aa07516b5dcaddeb9cb1da2b312c7718e686c433de4a035bfe5f5856e9aaeb1a9fe668e20c18ff19641baade988850e82acc","ssdeep":"192:r1Ds60CMSXc6S1HDy0glLrR4icrAPZSCuvTL1LZkkCb:rJs7KXjSJ6RrRcrWSX9ikO","tlshash":"8112185ab47aa5f88dab4012200a723474351fd1f80895d9b2fc9cb86589ebc332f37d","first_seen":"2026-07-29T12:57:29.627252Z","last_seen":"2026-07-29T16:17:10.92204Z","times_seen":4,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/50ecd525f79c48a696b05a37a3e699ef.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.107Z","timestamp":1785330076107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/50ecd525f79c48a696b05a37a3e699ef.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 21:58:43 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54845,"size_decoded":55372,"mime_type":"image/png","magic":"PNG image data, 220 x 220, 8-bit/color RGBA, non-interlaced","md5":"382b77cebad58dba8d896d34a5fee7ba","sha1":"a539ac1a31eea28f713089fcaca82f9917ac02d1","sha256":"0cba9a9824463306e1bd91d03028664efcc1f96c023cfa6588c8369dd0c73be6","sha512":"9c9c98926e16add7444c172a2cf8c2ea85ccea5eae33ac87207000a892ee9a02695bedde1218e9e811471d913c22c3ac091e8c61ddfa8a8a6b733891907e7d83","ssdeep":"1536:d/yNP4/Hu8hdbTjD8HbemYkUy3CnDMmF+P7XgHeMdqI:YNP4/Hp7IHKmYkUySDM880+OqI","tlshash":"5e3302ff64c8ce259b14682f8da9a478c0b9ebcd511212fb1ab0ef57e8d85e441c4397","first_seen":"2026-07-29T12:57:29.741158Z","last_seen":"2026-07-29T16:17:10.903238Z","times_seen":4,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-06-02/0727d83f-a756-40ca-a386-e37302b20e04.png","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.497Z","timestamp":1785330076497,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-06-02/0727d83f-a756-40ca-a386-e37302b20e04.png HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: bCbXhiBUo3/GZlLSpisSc4LCIhBewYsBpPvt6lQoVo16DRwPuLzvp9oDNMqz8+5SNOxmJu3OhqCNWeGw5dBdtLtJ5NNJegoH\r\nx-amz-request-id: G9PW3CDYA7JDK0CT\r\nDate: Wed, 29 Jul 2026 13:01:17 GMT\r\nLast-Modified: Mon, 02 Jun 2025 15:36:08 GMT\r\nETag: \"c2e849921810df79a4b212ab370bdab5\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 477796\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":477796,"size_decoded":478252,"mime_type":"image/png","magic":"PNG image data, 583 x 582, 8-bit/color RGBA, non-interlaced","md5":"c2e849921810df79a4b212ab370bdab5","sha1":"fc233c99100c625d422ecb347ac83745f0b44259","sha256":"1616d03649367800331ac74c37f64a06f902d93e7bbe77b1595d858eb0fc3500","sha512":"2878f059e90498aff237f23e32259ec78ffdab4d5799f12a715d22311afe316f0f6c4d74ef9ecb9ffce9ac8bb1dcd364056d19539b7531ae9a77d4a606cecbf6","ssdeep":"12288:ynmcNEMrvHuSyoMRnDkLZrvpXjThLDOq5L4xwninhn9YK4qltD:ynmEvHvyx1QhvJjFWq5tnO12K4WD","tlshash":"65a4236e8953993c7469ed6d6ccc713e9cd56ab506082e298cbfd1e371803c53bb2386","first_seen":"2026-07-29T12:57:29.701612Z","last_seen":"2026-07-29T16:17:10.948183Z","times_seen":4,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":8,"connect":94,"send":0,"wait":126,"receive":373,"ssl":204},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/f8a9d9e3888648fe83f38aae14e33fd4.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.647Z","timestamp":1785330076647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/f8a9d9e3888648fe83f38aae14e33fd4.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 06:34:11 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":581507,"size_decoded":565716,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"6ac4e9659e38293c1c7d60840fab8150","sha1":"77c6616c31b5575709ee3cc5ffbbce18b18ca95f","sha256":"548ab3d6cd06ae5b124e928f0bb4ba36b114f376e9307bfd6de931e652ea5765","sha512":"7281cf7b9ba07b8140c60e620fbf9e1fb6522fbb10dd01a7217f335e78869f9d7263f5c7d6a43da1b06da674a400544f6c821c8658d09239bc7cd5c15ee7ef02","ssdeep":"12288:YHW5xPKLUzCiPNn5CSM1Rf2tRRrxCAQr7xmuyrSiFJ47qI1z6i0ybXKxEzdCqKPI:YHWaUzdPeSM1d2tRK/9aSI47qI9hZX7h","tlshash":"0fc4220254e9ca5ddf9b217a93912b339babc86ad3e51d46d212c3ddc008d679df2f08","first_seen":"2026-07-29T12:57:29.474933Z","last_seen":"2026-07-29T16:17:10.985127Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1040,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/app.b1b632b5.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:12.907Z","timestamp":1785330072907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/js/app.b1b632b5.js HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-9eaeb\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":649963,"size_decoded":187134,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"2190ec56a8a9378e1d630c04f91f3f53","sha1":"457c8c57a2ad7a93640a930d7456f229ae40a2fc","sha256":"2622d1e2783b718a7cc0748cb0b8867d50056c734edc9587b44fc85296ff2577","sha512":"f76db13a807e4b55210ac68d03580ee161970e1cf073426ec5c7f8ebf66602f740f7ac000bf154fdf9e3c00a24159767ab60156325c518304415c561a44416ee","ssdeep":"12288:q6vHzP+ZxtLzT9HxPUZO23iYEK6xK5Q+4n69cEdswB97QcTFLRbAHFyrL3rqahQS:qAHzP+ZxtLzT9HxPUZO23ZkxK5Q+4n6d","tlshash":"ecd48dee26d3fbf805540782901b75b5229d1d7eff99b4e044e8ea5a31ec680c113f6a","first_seen":"2026-07-29T12:57:29.606964Z","last_seen":"2026-07-29T16:17:10.94102Z","times_seen":4,"resource_available":true,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":923,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-elementUI.b2d16944.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:12.909Z","timestamp":1785330072909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/js/chunk-elementUI.b2d16944.js HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-bf862\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":784482,"size_decoded":205711,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (64709), with no line terminators","md5":"7983f57d373e2c844e340e3e35391932","sha1":"31ef0dead16d8479ec6fef5362153c9bfc1ceecc","sha256":"973d4f9545e7439627fa05960299b6fd81149c36e34f69da2dbada307ae27133","sha512":"78bab2d610bebf6617d9ae460d54d8cd37f6699d9d71bb6145c0bd9abf85457491fbf0e442f5a3dd1e8b324841d2ac54cf484ebd916aa9c4fcf77dd3b5705903","ssdeep":"6144:QNiQfM33tUFytdodpylw/9TVyjsMi7gTgUubmZCOs8GsOIdjkHxKrdDt8NRHIn:QAeZIdodp8w/fNU+ODkHx02NRHIn","tlshash":"3bf41b8e72c1b47147a36070103f250bb33b2aad6809809cb675d8ea6d79d4d626ff7d","first_seen":"2026-07-29T12:57:29.74879Z","last_seen":"2026-07-29T16:17:10.914259Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/fonts/iconfont.0080bb9b.woff2","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.863Z","timestamp":1785330075863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/fonts/iconfont.0080bb9b.woff2 HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tiktokhkg.cc/buyer/css/app.0d55f464.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 5212\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\netag: \"6a677b4f-145c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5212,"size_decoded":5651,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5212, version 1.0","md5":"0080bb9b021fc0823608910adc2e5fdb","sha1":"b03c86fc4fb5e0542122925d2eb2468cdc842dd3","sha256":"a72e9b48fd851011d2e52a77ae7f72b6de42e4647182c7bae3ca49edf3347af4","sha512":"aa68b80986d5ebce07a92a36839e2b7f4365932ac12c992864ebb4a4e49ab9964e39464d9da1b79a0f963947a669176c3f65b23ef4e4203e520a790bfe6b0756","ssdeep":"96:vSvxwJyBbfhD1WrBqAFtlzkqV4tQWGRGQX/rZHhxm9Sy4kUf6:vS5H1p4FtlwqV4tOGQXtBxm9SpkUi","tlshash":"94b18f888c661528cf387a353840367dc9a3130db636e49acae41f1b57ab78a0159761","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-07-31T08:07:13.89969Z","times_seen":8147,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/banner/20260702/2439fd2f257942098083431e53e23fe8.jpg","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.586Z","timestamp":1785330076586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/banner/20260702/2439fd2f257942098083431e53e23fe8.jpg HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 02 Jul 2026 10:26:51 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":478027,"size_decoded":467346,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 3168x1344, components 3","md5":"6d236c53e3bedeffc32a0be356fa2213","sha1":"ae4613f26fb6bd423c7c73377bbc09a824d5a232","sha256":"2f9f8ed7ff3862f899036da111fb64c4c8acb799475fd2f60cb5aee604a32593","sha512":"105588563d48ff298ef71dde8ea73833e629ae0b7dd243016637a6878d5947d4015011068b014cd58d8e0bd910c306a156e8be3c587edf5ba0661e0d29eadc48","ssdeep":"12288:aQvmx1u107mwA8K3Ko62egG3X7bgA2CRCD1hJp3GY:3moumwA8cKP2eHH7sAzRS3GY","tlshash":"3fa4237bc76211d6d921cb7154cb43121f1b3887aa2b9901c30b9b53e26c7f8fd9da94","first_seen":"2026-07-29T12:57:29.705707Z","last_seen":"2026-07-29T16:17:10.946116Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1099,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1099,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/d4031fa9399a4c56906a7fa35bbb0d13.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.628Z","timestamp":1785330076628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/d4031fa9399a4c56906a7fa35bbb0d13.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 05:37:44 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":966991,"size_decoded":955184,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"a226f7052b91a764ef72ba385b2bf133","sha1":"b989b0031731d7e02d46efb744e33a8781f0d942","sha256":"6736dc4191243c4acc70a0a5d9d65905a3a625383080aa744a70dbae9ceeebec","sha512":"4ae40bc832327fa05ded62b6e80336f22e1d91ae4a03d4079029e1c262da77905623e0e1860a19e996d4a9e9f50f67150326d47590b88f66134a56850d79ae13","ssdeep":"24576:QdkpUH2erG6Z7A2fEqxMUr642gJNhJgpp5WAaanHYm:Qd1WerW2EqxMUrBzNEpl1nr","tlshash":"9c25235deabd27b3fb9a26b972d5308fcdc086c981540128cbe2ecfd648dd2105e5653","first_seen":"2026-07-29T12:57:29.324287Z","last_seen":"2026-07-29T16:17:10.965813Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1055,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":1054,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-396affbe.c4dae239.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.341Z","timestamp":1785330075341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/js/chunk-396affbe.c4dae239.js HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-4a06\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18950,"size_decoded":8884,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18949), with no line terminators","md5":"200256b7052a0d4d8bfab1af960e5451","sha1":"e2eaf6cf5e39e51c7cbfe2d636c8d62883715937","sha256":"8e3687817f2e0b32f8ba8e57cae6a3323f570b0ff3bbd9e34550f62b26993141","sha512":"41496189826e6838e83cac6180b7edfd7c4f3bd262edb27cc02d26a8141f4d5201e73f47e30d58806e603f077b1bba69a4915bff58e147f5d7c788b3545d6a70","ssdeep":"384:nUMkgid9VACPyhjwefRHLU5iP4udCTOS02wFfV/GKk3604B2Qnb:nUZfVnsU5blO8wiJ36Znb","tlshash":"ff8209c935e1f05d12f624e004eb9483f23aaf06784d1876a240d1967c36ddaf2aff26","first_seen":"2026-07-29T12:57:29.715055Z","last_seen":"2026-07-29T16:17:10.978616Z","times_seen":4,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-1051c767.c7812c46.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.345Z","timestamp":1785330075345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/js/chunk-1051c767.c7812c46.js HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-4d43\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19779,"size_decoded":7045,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19625), with no line terminators","md5":"1953e778d8f162f8375636c7ebc1d038","sha1":"89e14e152de68f35e7a7615f163fadc63df30453","sha256":"84162afff714647ace12479112c864a933e5a9d93229042e76f8a9350e54c3e3","sha512":"cc437472a05567d9e0382104fdf6733936e991cc152ba6bbc4dee1747c6241c099dc6eb9484a46a783cef33640e6ce0509d63a0c4a4d8afa9b7eea89119a6761","ssdeep":"384:4RXkGRgPJ8/cycOoVRTVuDrpGgZV2rpz2k5:4RyPJF/TVOpzZVKpZ","tlshash":"4b92e73a91417c4d0e239166702f3051e0098418b819df9af978ceeabbeed69361777f","first_seen":"2026-07-29T12:57:29.293217Z","last_seen":"2026-07-29T16:17:10.917471Z","times_seen":4,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/13860bb4f799437b81bfa1056c4ec806.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.116Z","timestamp":1785330076116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/13860bb4f799437b81bfa1056c4ec806.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 21:58:56 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44831,"size_decoded":45228,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"640a487ce036cdea96cde40c76b85064","sha1":"c4a130a64b9ee0771273dd7a11e852434076f477","sha256":"333f1fb228e4af3ce7fff5115c714afd2396176a530cc03dec164bd6b79fe607","sha512":"1b8147b060e1a0020da8e9d4010b9e6ad86a6ed70fb72e6cdac8c106b7cea880b1a22110f00536e49de9ec33a4d2888f32b73415680867159b4a8738700778f4","ssdeep":"768:EdqPm+GpLFTwlzjsVWjtZ6zkdAHf0wnrlmchxSLhPD4kxObvP0edYq8GhnVHhQSx:EMPmRp5TOzdTa8wLxetEkxOLlYq8GbuC","tlshash":"f8130275844f2dc3c271927df69e462ffae015ee4a132d55fd247c8b92f8823b590514","first_seen":"2026-07-29T12:57:29.611758Z","last_seen":"2026-07-29T16:17:10.925675Z","times_seen":4,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B06WWP6JCT/71CZtQ5H0NL._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.541Z","timestamp":1785330076541,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B06WWP6JCT/71CZtQ5H0NL._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: rPRNBFhn3N1la8HrtlAo9zHFHX2/OOyOA7f6njcmJmXxOleXYwd55NFHMl+HVp0tjLDaN3Lu54k=\r\nx-amz-request-id: VYS7FWZQBGMDR9BB\r\nDate: Wed, 29 Jul 2026 13:01:24 GMT\r\nLast-Modified: Wed, 22 May 2024 00:33:55 GMT\r\nETag: \"97133d428e6504f8b8c2b916f1ed7848\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 63940\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":63940,"size_decoded":64337,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"97133d428e6504f8b8c2b916f1ed7848","sha1":"b0caf04677dd957503e24f979f54262ffa26ff9c","sha256":"bb174eb50627f564bc2c5e1bb3a0f881b678b5d8c04a5c822d59ba5ca0db1f05","sha512":"a90c061345a1296c1bc750caa3c430ed7e0d6dd37d66f3aa8a1adf6b738537504c3be7d532a393846ed24efffc0f5a1161cd54f1d52d2fa7524191e040cda757","ssdeep":"1536:TOFTGB+bGASn3qRiZuyKjo3aHfDEIueViDh:Ki32ilKj8aHrqeOh","tlshash":"5d53f2c66f5ea165c03c927db21f521b5f8f4f64bb2d00ab3e02ca5dd5d6c35a22862c","first_seen":"2026-07-29T12:57:29.379174Z","last_seen":"2026-07-29T16:17:10.905354Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7204,"timings":{"blocked":6625,"dns":0,"connect":0,"send":0,"wait":115,"receive":464,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B07C341MRK/81dKRjAmd9L._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.560Z","timestamp":1785330076560,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B07C341MRK/81dKRjAmd9L._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9Oh4O/lD7YARKUa1XMyQIxuxRKnEu1p8mlXzuCyVGA4/e7qjS6WnuAhGUEWQvlYux3WzXSuo8/U=\r\nx-amz-request-id: S72KSH5TWVPQNKHV\r\nDate: Wed, 29 Jul 2026 13:01:25 GMT\r\nLast-Modified: Wed, 22 May 2024 01:08:32 GMT\r\nETag: \"291af748991125d63c41708c04648bac\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 3e42323487c8bc209a426d25bed5ea61c45ddd4c1e19fb640412d775597d2106\r\nx-amz-meta-s3b-last-modified: 20240116T101343Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 284459\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":284459,"size_decoded":284990,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"291af748991125d63c41708c04648bac","sha1":"eec4657c4bc0569a8f147b6c73449beaa8938e0a","sha256":"3e42323487c8bc209a426d25bed5ea61c45ddd4c1e19fb640412d775597d2106","sha512":"124777bbe1c5184fb384cdd6a733d5b2678858a716acb5e2bce58bf65c3a6e5ca180e74381e1fbcfcf28e03022263324ced00d88669465cf75deb151ec9d30c8","ssdeep":"6144:3yDera/d83LzQGaOrM00jeyREC551zl+NzX4jNqx1NuK:3yqA2Jb0ayKc5tlKLHpR","tlshash":"aa5423e6dad74064c459d03a0e5bed0f887b682f395be3875494b2b4ec393b264dacc1","first_seen":"2024-08-22T23:13:11Z","last_seen":"2026-07-29T16:17:10.961135Z","times_seen":85,"resource_available":false,"data":null}},"time_used":8493,"timings":{"blocked":7665,"dns":0,"connect":0,"send":0,"wait":126,"receive":702,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/img/pc-side-1.63abc80a.png","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.592Z","timestamp":1785330076592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/img/pc-side-1.63abc80a.png HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-132229\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1253929,"size_decoded":1022604,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"7c5683c4bb7acec0e3ad796748ef04bd","sha1":"364218446a41e9a559c1b5e555467702e32b9661","sha256":"862b5ecf8f81a0f43ccd2e840a51ab2c4fb8f4487549fb00d9996fc703c50ed6","sha512":"dbe39cb64e41053da96b1853e0c81ff90f3243a2f8065bd0dde3d2318edfacdacfa62c3e96312b4af9da0d48e3b5bef019ca9620d7f0d43f175f65ab815edfec","ssdeep":"24576:6h5mb2b9WzB+m4rgY2QVP6meHrMb6gMleouM1SPgigCuksw:Kx5WzwQY2m6trI3MleJPrgo","tlshash":"2925019390a0c98ad5c031bd55b8b0df95558b76c290edf8f5780e9b7bb45f80a083af","first_seen":"2026-07-29T12:57:29.620791Z","last_seen":"2026-07-29T16:17:10.963397Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1059,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B01MFC0LQE/81lbU-h2WUL._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.535Z","timestamp":1785330076535,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B01MFC0LQE/81lbU-h2WUL._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: sXZ1vLbaZGNJ5NC9yWubOdw8LGjSZjK6/NyucNp3up6KNLMVB63jUAthRDxXYrZQrLthPM5O/QE=\r\nx-amz-request-id: 620KTJSGQPERCH1S\r\nDate: Wed, 29 Jul 2026 13:01:23 GMT\r\nLast-Modified: Wed, 22 May 2024 00:27:19 GMT\r\nETag: \"7e8edde7decf34f0323710c0c85a0241\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 86976\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":86976,"size_decoded":87373,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"7e8edde7decf34f0323710c0c85a0241","sha1":"adbd35386a8209e67d01aae1bd9ba37f12392ee8","sha256":"20a02a56a21a7e0f282918445700b589e9a86f2bae10c1626076d8b0aa01314f","sha512":"b9cae26300d5dd4c2943f5a4391b9e810edc0df015e0d80dac074c725043d3e4b1ad366cfa419d603a5c7c4c3006eb48d71668a00b7308e6539d853dffd7e6f9","ssdeep":"1536:+so2FAhouXwAYsPmKjhbWFlSQAJJtDI0PGPcae3Z2BPhhQK+7fEnALXZqWda/:tAXXqgbe5CIyGPcasZ2RbOrDr0Wd8","tlshash":"dd8302cbca806826f1e46739dce6d6a828744715c7ae0f54b3883d34b6bf64460e5c6f","first_seen":"2026-07-29T12:57:29.868707Z","last_seen":"2026-07-29T16:17:10.912275Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6548,"timings":{"blocked":5874,"dns":0,"connect":0,"send":0,"wait":119,"receive":555,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/7df7eba53eee4aa8a8199300b20c11d8.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.646Z","timestamp":1785330076646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/7df7eba53eee4aa8a8199300b20c11d8.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 06:01:46 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":817057,"size_decoded":806543,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"71dd967ff2c9253fa32c78a6352ffec2","sha1":"55f9092994251925fc398f0c78a79f0bd038bfb1","sha256":"fc348e2ce19cab25414d7a3cbb45849afea0b3922c76f009e81e0cd0bf2472a0","sha512":"014d5a2bf09cef5f246a63add83703778ee3173c2158b8bf769b16447d63c3d6f79babdaed8d9b1011bdab931c10897aa88f9d214f788559c54d4fc35b97f026","ssdeep":"12288:LJNcDWRXnMS7V27O3Xmp7mBT2R6tjX2PyEUxW88vh+SIH+T60x8Q87d0PZF3W+:LUA8+V2a3e42hyEaWXnIH+TH/8U3W+","tlshash":"3105239cf0db48c6ce9f0b35e3052c686f9b1273a50a916c45367093c94e7b56e0a7af","first_seen":"2026-07-29T12:57:29.326431Z","last_seen":"2026-07-29T16:17:10.911222Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1041,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1041,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/536eabe476b345d5876153e89ec7c412.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.651Z","timestamp":1785330076651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/536eabe476b345d5876153e89ec7c412.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 06:19:18 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1468679,"size_decoded":1461622,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"1f6093970f782315b90c2a82553a766c","sha1":"c4bdf408cfdcae10165365dc4810ea6c6fb49bd6","sha256":"e76fda43547a6c6611f78c0560ad672a609ef38c189ef69a610428401a48863e","sha512":"12681fbf516e7d26c441b09e306f9aef9e53316b9e75f3d598cb689ca8c8042426f84490210bb5850a261f1fa4a098f896e4bda2cd4b5f2dad80ec16246ad81a","ssdeep":"24576:pPgrXdppGs3FhdGguz4DdY8tiD4wUZ/D714gvPLn/V:JgTz8ehdGBmdjsgd465","tlshash":"4625335e4aed8801e4d70f376a258a92afd8bb374343301e49a1d9f2066f91d7173fa4","first_seen":"2026-07-29T12:57:29.331652Z","last_seen":"2026-07-29T16:17:10.959079Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/conf.js?v=Mon%20Jul%2027%202026%2023:36:34%20GMT+0800%20(%E4%B8%AD%E5%9B%BD%E6%A0%87%E5%87%86%E6%97%B6%E9%97%B4)","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:12.899Z","timestamp":1785330072899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/conf.js?v=Mon%20Jul%2027%202026%2023:36:34%20GMT+0800%20(%E4%B8%AD%E5%9B%BD%E6%A0%87%E5%87%86%E6%97%B6%E9%97%B4) HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-46d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1133,"size_decoded":1124,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF, CR line terminators","md5":"024c008b42f41c2f8e99f36e3550fe69","sha1":"72329a522f69b0fab9dbbfddee44413a93ea15f7","sha256":"ae7b7b1438f8604bde75fe540840e4649a735342593a1fd72a577633d9cf9ebd","sha512":"51a18844bf71e1dd7982df2c432fb1ab5033d62766148f1386c047431eb9a1347190e1dc5eb74064ba1716b688f40f23b61254d1ada50521469b828a4463a431","ssdeep":"","tlshash":"b921dd8f91f9900586b0465825b6e841d37a12aff0404d24fe3bbba03f3337534c2659","first_seen":"2026-07-29T12:57:29.864177Z","last_seen":"2026-07-29T16:17:10.983367Z","times_seen":4,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-77eec948.5c4becb0.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.302Z","timestamp":1785330075302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/js/chunk-77eec948.5c4becb0.js HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-677a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26490,"size_decoded":12111,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26482), with no line terminators","md5":"097d8571188e63287939df74948ba7fa","sha1":"9b2cc5b5969075259696d5b130aa6fcb4159a9ff","sha256":"de067a868d80ac3867a9c2f2130440986e372c3a25eb0d6c0b3cab3cfb727385","sha512":"9e9684e7fd7a89013e922129b77af11a091c1c4688b51f86c2056e450a1caa41dcef5d8795449bd4dab30738eb2e1d8375c103191c2e588058f5462b0740572d","ssdeep":"384:WKisWsX9S8uLH63Vn69yoD5um6tr0M/MOzweSgepY8qOzh+O6alQSX9ikFOO:LN3P69yoDj6Z6KEh+PalQE9ikFOO","tlshash":"07c26c57a480bcbc8b632295380f2155bd662e85d845cc99753cdce8e1fbd21b30bbad","first_seen":"2026-07-29T12:57:29.766878Z","last_seen":"2026-07-29T16:17:10.92779Z","times_seen":4,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/e8c083fb29e74c34bf0fa91c413f96ea.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.104Z","timestamp":1785330076104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/e8c083fb29e74c34bf0fa91c413f96ea.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 21:58:32 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22124,"size_decoded":22502,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"dbdb1c9e0ba7c3db46f9a4cf61aa38a3","sha1":"b45e6e2366d1591165768e75241de56de41e0407","sha256":"ece8afc39aea230fbbbf36ff179a856f180b4fbf466415358c64f56f77d6e949","sha512":"0736673183f797626b4cbb81509843cfab4cbec8192af44558a95732f34e57287cf34e9ffd89624e7a0ac64e7a67f5d920c2fae526c0b8fa5dc124436be6d863","ssdeep":"384:vyZuqJ497ld3GZKMv51k93b+mJHx3fKFFVQ16MtDzqosyXMMpP14Ac:vyZm/dGzvw9tpf8uw04Ac","tlshash":"82a2e15c8a190017184f275789d304ac59d50940ef29afdd934bfaac32f936bbd0abb1","first_seen":"2026-07-29T12:57:29.717424Z","last_seen":"2026-07-29T16:17:10.976435Z","times_seen":4,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/0a78ea4bdadf4cdcbe87508bcde9204e.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.650Z","timestamp":1785330076650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/0a78ea4bdadf4cdcbe87508bcde9204e.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 06:21:14 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1189497,"size_decoded":1171855,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"11a0921b2de552f7a7d9c3ce1e19d1ee","sha1":"38fa8ac32ead53b70725bbbba25d0a2061b8421f","sha256":"159190d82aee1d683c7941460cfe17ed5bbf289a265c5566fce50b8aeaa27238","sha512":"eb6101622cabc6a758db382c583c1fdbeb87f460996fd050e4cc405318f373fb89e4c1959d8df73739ae839215242903ee38ea3b278ecec55c5e65796e3f1bfe","ssdeep":"24576:MIKc2HbRo3k9ECmKn4gc53kYcJbH3QuEY6ymI:9QHbRo0HJI3/kbH3wW","tlshash":"2b2523b4837fc9aaf6ab69fa4817175284c816661b539fb1d29df14c202e0f8e344d4d","first_seen":"2026-07-29T12:57:29.729094Z","last_seen":"2026-07-29T16:17:10.975894Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1036,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1036,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-200df844.1af3588a.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.299Z","timestamp":1785330075299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/js/chunk-200df844.1af3588a.js HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-6bde\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27614,"size_decoded":9061,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27583), with no line terminators","md5":"edf5db24f943debdaf7eb47b2558f0fc","sha1":"2bae4934e9f0f8fbd3923452363ae3d7692438e1","sha256":"3c3e2ece4da7b0095ebe8a6e40cdbfd049592efe118ba654fe19da341fd7a47c","sha512":"f8c4025e61ec0e7e6666462f2f8037c2847800c030a9f8dd12e31428134716596335f056743858da62e7cea857a53a72779ef867dbf8d33443c4753e730258f9","ssdeep":"384:SHA3S/0oWvknwOZ/6et9g2bsc0s/edP1/RHKoV5U0KsEFE:4A3+0TknHZ/c6qZq2U0yE","tlshash":"e9c229d9f5b0b07c45ab9163141b9095f3353e48a5279488f378e8ea7aa8518233ff3d","first_seen":"2026-07-29T12:57:29.714266Z","last_seen":"2026-07-29T16:17:10.91487Z","times_seen":4,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0C7VT86L7/51d9mtCv5WL._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.551Z","timestamp":1785330076551,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0C7VT86L7/51d9mtCv5WL._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: mUdfb4T5+8qrTV7YyBuXFapXbyWJpv5JKdXNLLBiNW5g0GmC4X210LLE637TvmYqXR9RvGildXc=\r\nx-amz-request-id: S72SRX7Q119VXBAW\r\nDate: Wed, 29 Jul 2026 13:01:25 GMT\r\nLast-Modified: Wed, 22 May 2024 10:42:07 GMT\r\nETag: \"eee27dc41a3d7548895a430e94e72d33\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 8d2ee47dcc9165676ee346263dfb4a6defb44866d945f37ba5a4da76a8cd45f3\r\nx-amz-meta-s3b-last-modified: 20230728T050547Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 27722\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":27722,"size_decoded":28252,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"eee27dc41a3d7548895a430e94e72d33","sha1":"4cbdc4df26eaf6b6d7a2366d18c71bc2294c285f","sha256":"8d2ee47dcc9165676ee346263dfb4a6defb44866d945f37ba5a4da76a8cd45f3","sha512":"3225a2949ef18732d20c4b0fbd58d8f2d9aa68a6480b8a9b91f005f4d7edd42beb8b45734241ab8e28c3ce79561fc084902e99bd01c62ac3242d0c9ed4152177","ssdeep":"768:FpC9tJ9AjHYTYaQW4CCcIn3a48ZY7n3hEWgPc:FpyAr0pxYmG7xEFc","tlshash":"90c2d0ac7f481387f717bd7a1c7447627ecd29f4e5913c80012209a6a22b4ebee91657","first_seen":"2026-07-29T12:57:29.578974Z","last_seen":"2026-07-29T16:17:10.943078Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7617,"timings":{"blocked":7405,"dns":0,"connect":0,"send":0,"wait":119,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/02a20c6f-64c7-4cca-bcf9-ce2f7665c0f0.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.558Z","timestamp":1785330076558,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/02a20c6f-64c7-4cca-bcf9-ce2f7665c0f0.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: u4DZZS1hIzZ6GG9zYutMx+xXqxntqSDIpq69/CAxD2KiwG08hXxnRCKzWURcjj+xyrCAqaoJf1k=\r\nx-amz-request-id: S72N4MCT1RYQ9R8T\r\nDate: Wed, 29 Jul 2026 13:01:25 GMT\r\nLast-Modified: Wed, 22 May 2024 20:46:29 GMT\r\nETag: \"0585a09955aebb7ce5792e45ca38dac9\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 82764\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":82764,"size_decoded":83161,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 934x1200, components 3","md5":"0585a09955aebb7ce5792e45ca38dac9","sha1":"93fe4906be7d11a2c1292df37df20c2476c43faa","sha256":"4100f1ea89ad9c69a9e0679e2fc63a41e02a1802a62326a2edc3b031701ea9cc","sha512":"ad460a974aa8301c8b8b16ce8e12b76afd6d92c92b5ec2646a8abff8ac8993b42f097ebf0b399606e6ce36eacc3b86a8f12417c8c045eac8b9ee5938ea6b5fa3","ssdeep":"1536:ez6FQYDwLW+TjpM1gK/B53iyaB5DOEGOTio/S7wNvVr/AV62tfS8c:ez6FQA4W+/Sj/n3iyaB5fGOTq0vZ4Vbi","tlshash":"1f83027268564b1dcd9b443c4975a47f732aa16a2cf2d11b21ccbd01f836af63db88e1","first_seen":"2025-08-06T14:07:13.858651Z","last_seen":"2026-07-29T16:17:10.94868Z","times_seen":11,"resource_available":false,"data":null}},"time_used":7976,"timings":{"blocked":7660,"dns":0,"connect":0,"send":0,"wait":116,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-09/36825b7d-a93c-4450-8984-e4fc5d20cd4c.jpg","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.571Z","timestamp":1785330076571,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-09/36825b7d-a93c-4450-8984-e4fc5d20cd4c.jpg HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 6/MiaAOUTHMU7AB9E2IudlfrKQnpFiQI8NhsH+D3CPSpiNzUUa8HdyjAHtXjkvKXvnL4waz/OUe3OqikVX8JfdSiqLqQ8ep4\r\nx-amz-request-id: 1EB8N458KHFDNM0H\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Wed, 09 Apr 2025 09:03:11 GMT\r\nETag: \"763a6f45c428242ec7bc8e394e4258c0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 142563\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":142563,"size_decoded":143019,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1500x1500, components 3","md5":"763a6f45c428242ec7bc8e394e4258c0","sha1":"c6b0842229f6990c3ef8e746560074357b6e27ea","sha256":"e0eefe3db7cec3891ef8bbfa1cc5c9e7178177f4b04ed48b7a7fcb8e3fa02640","sha512":"70e35bf00f694b816423626a3d92b8fd27f756ab7fc05cd3fb980e44c2f70a37631c836d8370c23cc75631b3a9afe401b1b387ad3126f5ff406b090ee619760f","ssdeep":"3072:iEzuiswfayTPy6UDFq9/lGOkmI8jJ5fa0FYZSkLL:iXi6yON4lGO9IGJ5faXSkLL","tlshash":"73d3bf03cc289b43e57887e4bd430e7d2e067b5c99973afa11229ecf7d642161c9e46e","first_seen":"2026-07-29T12:57:29.670929Z","last_seen":"2026-07-29T16:17:10.962826Z","times_seen":4,"resource_available":false,"data":null}},"time_used":915,"timings":{"blocked":799,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/banner/20260706/7289d4add5b74f42b35dec0530a6c91f.jpg","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.584Z","timestamp":1785330076584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/banner/20260706/7289d4add5b74f42b35dec0530a6c91f.jpg HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 06 Jul 2026 09:57:37 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":127185,"size_decoded":126985,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 860x382, components 3","md5":"92ce69b03c1e584ab483a5357b88e796","sha1":"b7c9b118989b19372f78693d5596880b862936f9","sha256":"aa55055c9b042b02aca29ca12f20e682c04edb57b8b5223edc4efb086511740c","sha512":"34f8c0ba2dc96dacfcb3c759fd46032dc95a2c87a19ad91f9778286a49d0905c1cc715a5eb275f9decde4f0204038eebfa740f24055a7cc9acbcfd57b646b1d7","ssdeep":"3072:Ee+mKwbfIs/HI0XXXx6vlXdwe1V3Q7nlF8tD3/hnrWwtsGp:EemwzfXXXsv/h1V5hnl","tlshash":"2cc30257ded12534b3cd053860b3d8448ca80b79e0a835098c2d6659beacdfaf67e1e7","first_seen":"2026-07-29T12:57:29.463004Z","last_seen":"2026-07-29T16:17:10.919437Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/e78e18bff4724acea6800601ac767a7e.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.645Z","timestamp":1785330076645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/e78e18bff4724acea6800601ac767a7e.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 06:08:00 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1226779,"size_decoded":1213402,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"16a01ae2e1c6ba8fe54a8393ff8524b5","sha1":"8f5aa2831a1bd04ceb33f7bfd4b345a647d1acbe","sha256":"e3cfb651a910d6656c01e21b1c9108295a01b4d63b89fcba14e404d590c02b9d","sha512":"cd8920a55a30fac1a0dfec95277710973aa87bd92f23c3eb5db05910912c0d00434f917f317f3514700658e6d6206db0244e92f74886f321894ef091b460d869","ssdeep":"24576:9VAm2zgAXZC4sK/+uqUWL39XWdKZifudrki:YzgAg4vqUWLNXWdOiWf","tlshash":"6d25230aa18c4265ec8b9779b276836ef7d55a35db32e80772eec148331ce190937397","first_seen":"2026-07-29T12:57:29.739856Z","last_seen":"2026-07-29T16:17:10.958034Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1040,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260729/68fc3663478845c78462b75adc5e7d28.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:14.904Z","timestamp":1785330074904,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260729/68fc3663478845c78462b75adc5e7d28.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 28 Jul 2026 23:36:10 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3553415,"size_decoded":3441909,"mime_type":"image/png","magic":"PNG image data, 5120 x 5111, 8-bit/color RGBA, non-interlaced","md5":"45407dc320184335f3e601e1f46ee957","sha1":"c006f099ec75c6a8644ef9daae6188661082940a","sha256":"f39fc4b9cd2f90e20857ca09b1814bd70ca1e4a09831eb00ba1814e34395193c","sha512":"aa5d11ef173db5fe6f8fffe0c8653c8c1e233b44dbdda910863400dbfe0ed0c3be1516d23560f9b269121a4adfc56c45ffa9a8e53f4e61bd6cc6c9ded960668b","ssdeep":"24576:cMAJ0gywcMl+XXJpVr03hzoyLp7DF+InsuIh:RqBy8+ppwRDQIsrh","tlshash":"df252244a5bbc08acecf10b125a43f47851396a6d6c46eb2c6f0e1bcde84ee5316d74b","first_seen":"2026-07-29T12:57:29.570467Z","last_seen":"2026-07-29T16:17:10.906611Z","times_seen":4,"resource_available":false,"data":null}},"time_used":944,"timings":{"blocked":-1,"dns":3,"connect":234,"send":0,"wait":469,"receive":0,"ssl":238},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/wap/api/syspara!getSyspara.action?code=mall_max_goods_number_in_order\u0026lang=en","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.909Z","timestamp":1785330075909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"POST /wap/api/syspara!getSyspara.action?code=mall_max_goods_number_in_order\u0026lang=en HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tiktokhkg.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: application/json\r\ncontent-length: 70\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tiktokhkg.cc\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline;filename=f.txt\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70,"size_decoded":646,"mime_type":"application/json","magic":"JSON text data","md5":"97198dd46aba42bf888f9d954bba7088","sha1":"27a39306c4a20b7390729ca5b67fe316a36dfa0c","sha256":"c9d1dc6ac58bc1cfeabb4f3b481b4a221f54c22e6af7a9fea756c450f93e467f","sha512":"36ba8be7d93957d58032aca040b5e33bd9911761add21a950ab525f209e6a972cb1b1dbd4d988be5fb466351023a7e8421c2cc0e50632888125054e6a99185db","ssdeep":"","tlshash":"21a02200ec3a8c220c03c388f88e230b82c0328883000f8c0c08283c023c83c32000f0","first_seen":"2026-07-29T12:57:29.390001Z","last_seen":"2026-07-29T16:17:10.938978Z","times_seen":4,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/wap/api/banner!bannerList.action?type=pc\u0026pageNum=1\u0026pageSize=20\u0026lang=en","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.910Z","timestamp":1785330075910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?type=pc\u0026pageNum=1\u0026pageSize=20\u0026lang=en HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tiktokhkg.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tiktokhkg.cc\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline;filename=f.txt\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1584,"size_decoded":1122,"mime_type":"application/json","magic":"JSON text data","md5":"0734207d860854e2d316fec38cbeaafa","sha1":"ecf9d80deb4b957e87edfb724dd2a1cc9d7d852b","sha256":"a1d9634d7be7fd8469543970de1f653cc69880bfe8b4a3595b21c7f8bc0f0f8b","sha512":"12544a665d4285013eab5b04eeb23e7af52f730e22a44414ca1825cc1495724a4e31609efae11c4227adf6faa49894e7858fe108bcb79cde8a0f05909c37b941","ssdeep":"","tlshash":"4131ce9a27d8c00409a37ac311db6484c196154be4a4fe47d29afc4e8d7ab737c1f347","first_seen":"2026-07-29T12:57:29.309297Z","last_seen":"2026-07-29T16:17:10.983954Z","times_seen":4,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/92cd3eb9e78b41d5b5777daf658355a7.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.108Z","timestamp":1785330076108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/92cd3eb9e78b41d5b5777daf658355a7.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 21:58:47 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17038,"size_decoded":17140,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"a6f4b7a24892c686aefd6278bc11520a","sha1":"b23890168f54c417f705e532ac727f244b541627","sha256":"0e7a901da00e85139b942df6b9c228593b7ff8878411da4a5767621ea4809991","sha512":"94f6942ed0082ed5f65078e4712fec57b575fe95f024b68ddcf6de6fb65fd89de6e34b27beb41382d886ac480515d9b79cb198336730db5edfddb72a1e0de176","ssdeep":"384:qqdNKq9wXrLfSMxSvOUcKhCYpir27go5Q1SS:qoaCMxSvObeb6Nhf","tlshash":"2c72cf5957e7894551da2df3b9d6280f9deaad5008c28db10df380517881bcfa3ef862","first_seen":"2026-07-29T12:57:29.43214Z","last_seen":"2026-07-29T16:17:10.952032Z","times_seen":4,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/666f40f62ac64306a064e1503a5c3f11.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.125Z","timestamp":1785330076125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/666f40f62ac64306a064e1503a5c3f11.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 22:00:37 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134462,"size_decoded":134883,"mime_type":"image/png","magic":"PNG image data, 880 x 880, 8-bit/color RGB, non-interlaced","md5":"dd8f8d561e2796a6e8f50ddb54a2f065","sha1":"caaeb070cb48d98891ea1958607e42e8e7dea93d","sha256":"848912c522d78826dcbaaa5940aacafd5996fb798c82c1283e4d6e64c6b0b9bd","sha512":"0b85d7188eccf7f735487062997c9d144931ecabb32c03843425297083a77b3a25a31f510f9003da2bb29b5d34926b4511410875272fa8a1b8f5548317334686","ssdeep":"3072:SrY8Jc0NpZydTFxgc6mnO42i0FdO5VElXdVqtpzNNJR37U2:0NZaTFDdnltVElXgRNNJRrb","tlshash":"aad312debd76c49aa552b95c3456eb1a146a03b02adba07d21704bfe4e006e25fc03bd","first_seen":"2026-07-29T12:57:29.396408Z","last_seen":"2026-07-29T16:17:10.942536Z","times_seen":4,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-12-29/7a76d98e-0157-4a74-8e02-43c0a5ce420c.jpg","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.554Z","timestamp":1785330076554,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-12-29/7a76d98e-0157-4a74-8e02-43c0a5ce420c.jpg HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: KJa8NEbTdgci1eq/K/vUT8aoNWQKiv91GaVafKX1ojKKG93ZbijsEImHqmW1O/eqmDgz1cIUJZpdECVC4XE5bmdsKwsxAiDf\r\nx-amz-request-id: 1EB95Q1RGE5SDFWY\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Sun, 28 Dec 2025 17:58:25 GMT\r\nETag: \"b2de13a6e81400080c4c38def2c58061\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 94965\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":94965,"size_decoded":95420,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 918x1500, components 3","md5":"b2de13a6e81400080c4c38def2c58061","sha1":"7faed979ea3a13ff4005b14ea80184a7d0b4e30c","sha256":"01d5ae14824a128b075cdb69492528b96ad1e628c324333fb3e1785800be94b2","sha512":"76de0966f4e689a041d69a1960700ef1ae74a23602aebdfc923c396fff2aab3b87591cde16ae66bb55c69cc9b3c74b3dafd9d5b22a6e31c45dbe790576d3b327","ssdeep":"1536:XU1DNvf/rTVIloTYtytU1d/gnEha0JlPVvN8B4qLTxi+fS0w4cl7lLYW5QgeJVzK:XYFfjamctjAEZlPByB4qVds4CLYYq/Qb","tlshash":"cf93127fb7824221e5bf6d36b237c953d61b747800b043472dd8a9398d83598af8e752","first_seen":"2026-07-29T12:57:29.382858Z","last_seen":"2026-07-29T16:17:10.918041Z","times_seen":4,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":665,"dns":0,"connect":0,"send":0,"wait":119,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-08/b87c0bbb-4f24-4a7b-afc3-e696eec670ba.jpg","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.573Z","timestamp":1785330076573,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-08/b87c0bbb-4f24-4a7b-afc3-e696eec670ba.jpg HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: n1/zApxWzTs8vg71S+3ZDcAVJN8H6HSJ3SOaNLKJt9bFJRj8UFal0AKF5ruyzZKz7nk44hLuf0L8N2qsKY7pVE7ZuL4jbbi3\r\nx-amz-request-id: 1EB1T5S561D1TPGR\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Tue, 08 Apr 2025 03:41:56 GMT\r\nETag: \"117e9d8ade5cdc72bd61a5f6a7ced48d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 200446\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":200446,"size_decoded":200902,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1500x1500, components 3","md5":"117e9d8ade5cdc72bd61a5f6a7ced48d","sha1":"6d01fe5145bbc73e0a44e295f58d14d9f270c7ee","sha256":"eb42c4bd549f598e2eeccb52e2a6c949ed3dd2f201be029aa2a601c600da83e5","sha512":"a45daba0f34211415b6a5f65cf53b8367b2fc62dc20699acdd764ccec0d1f90c8e792ef30c4efb684862d2943bd565a87ce1557d47fe7d6e400c898ed0d37282","ssdeep":"3072:H6pS14Q2QMIx/wtNblISO3Ji45/yI3cpJEfiu10isTJgDoBUTiluf3F0Da5COIHC:H8S6+KpISAaDpq6G0isTJ+XelPqBn","tlshash":"7114f107ee168783c55dc3e8be064ed92e452b4de99039fb52128fcbbb601661c6b13d","first_seen":"2026-07-29T12:57:29.591577Z","last_seen":"2026-07-29T16:17:10.918953Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1139,"timings":{"blocked":908,"dns":0,"connect":0,"send":0,"wait":131,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-29T13:01:11.775Z","timestamp":1785330071775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://tiktokhkg.cc/buyer/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T10:22:28.836523Z","times_seen":17633084,"resource_available":true,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":4,"connect":233,"send":0,"wait":233,"receive":0,"ssl":238},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-637414aa.ed6c9d2c.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.334Z","timestamp":1785330075334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/js/chunk-637414aa.ed6c9d2c.js HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-794\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1940,"size_decoded":1361,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1940), with no line terminators","md5":"bf44271e549207b5ba23644b481a36ee","sha1":"d09479ab4f2359c5cfa8e91dfaaba05b94192dcc","sha256":"d165933b834f0b1d6809fb519dd4ca88c203d242cb335b20683b11f730b7a837","sha512":"9b04e53ae6ea427b7251e15c31360159953fe4a383d7dd07a4b0fce84b9154950c8333e0a537970d41387e5b13d44e1adc9a386f0d51804c61ed006905e7da6e","ssdeep":"","tlshash":"684185df94a7fcadeb9bb0022169103570213ec244468c953bf4ce6085d4d649f1ea9f","first_seen":"2024-11-12T14:47:34.644865Z","last_seen":"2026-07-29T16:17:10.959543Z","times_seen":423,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-07/4aa376fe-3170-4ce7-97f6-6daefc545d04.jpg","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.576Z","timestamp":1785330076576,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-07/4aa376fe-3170-4ce7-97f6-6daefc545d04.jpg HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5mVNz5oxTVh6g//J9WrzVlPg2OHt6YITgNEis4ircc9xomHj+SvFaJhpkpYVbK9BULnypBmT+g/6+qsW4t3QjfMlb0n73x10\r\nx-amz-request-id: 1EBBWZT2X88PVQ0W\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Mon, 07 Apr 2025 13:34:09 GMT\r\nETag: \"bc3f0c0734b9bda61dff77dcc99c6266\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 18091\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18091,"size_decoded":18546,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 550x550, components 3","md5":"bc3f0c0734b9bda61dff77dcc99c6266","sha1":"c76085d4bdfcf948d1ec607f32b6f2b2372cf2f0","sha256":"bceddddda709c777a0c2e0f778b846d6dd120d284ba35b180887d5d3532f0d66","sha512":"7099ac6ee9a282612b83f71049c9c22a85ad74d0385ef06ad119f1cdd12d667b431e0c1872c2e198b7a89343038af7f797a368585c8dc0c865b60cd5f2890fe0","ssdeep":"384:GR/coFxQAlosSZhhjHT0yCo3qx8ii8SSqbS8gLJLlOvZgI:G3OsohTYuiHSNbc1LlOvP","tlshash":"9782d160cd4dc0a38927d776ce0f282ae047ed04bd217767b8e6b9f6e120dbd5481a6c","first_seen":"2026-07-29T12:57:29.832974Z","last_seen":"2026-07-29T16:17:10.976973Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":915,"dns":0,"connect":0,"send":0,"wait":120,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-09/213d8744-a04e-4f7d-a389-82eb76751df7.jpg","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.578Z","timestamp":1785330076578,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-09/213d8744-a04e-4f7d-a389-82eb76751df7.jpg HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Ud6DfgIkPJa+OD8ovJt2wgJfvu9QZtl4B9lOAS+1wKKEjN3XXDUTCe8h2ORyy2/WmTC3yfm9VXbio5nCEbsNdhULA8Q5F9AO\r\nx-amz-request-id: 1EBC4AQ84MX1E1QZ\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Wed, 09 Apr 2025 09:34:05 GMT\r\nETag: \"901f214177e7e3e86bd5b8874dda97bf\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 116314\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":116314,"size_decoded":116770,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1500x1500, components 3","md5":"901f214177e7e3e86bd5b8874dda97bf","sha1":"7238cd128ebe0c799aa22d9a2cf5066fcebbb38b","sha256":"3976cdedf37670bb0c3fafc7305c134b75a9352cb44342dd1962e450461438c1","sha512":"4ee5dfe3b211d2198c3034b3e23a77226208cf5582aed60202b4dac8ace6dc4d7915c0e0cf5976bc62f2037de1326abdece7be7f2e9aa6e0e09d35e35d1afea8","ssdeep":"3072:3qZhF3e4QJkUV5tPSUv7JZv7cPvuWXwc0Q:3qxe4Q3V5tbJZdWXwc0Q","tlshash":"51b39e079c189b83956987e8fe034dac1b1a3b1cf8a23afb56135fcb7d506225c5943e","first_seen":"2026-07-29T12:57:29.421755Z","last_seen":"2026-07-29T16:17:10.924636Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1043,"timings":{"blocked":928,"dns":0,"connect":0,"send":0,"wait":111,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/e23524190ef347ec9386ca389db29bc4.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.649Z","timestamp":1785330076649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/e23524190ef347ec9386ca389db29bc4.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 06:24:16 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2032713,"size_decoded":2023482,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"1714453c94d60bf05772c7af5855915f","sha1":"f512809b0dbb49925461a05bc576e0a8b0d79bb4","sha256":"126f14633c0c04936a49775c454f7409ac72324b9df4b2ed6831132b24965702","sha512":"d02a94e17477883e1d7580be77a41357d25873f3b5146877cf4b5a92f17126357a09a8ddab16bc94a4a856118a47e7f7ff70308a2c2aa07d74b05c6984f4ae0c","ssdeep":"24576:bNc+IBphJOQ1232yx8fvQ8fElhRgntsWvdJatzKi5F:b6+WfpY3x4YEchWtsWvdJ0m+F","tlshash":"98253321e57c8438fe2d00bf5de11a3fa4c860154f7edc3896328a2c759dda65b86b63","first_seen":"2026-07-29T12:57:29.399758Z","last_seen":"2026-07-29T16:17:10.9405Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1037,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1037,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-vendors.f37ef52f.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:12.911Z","timestamp":1785330072911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/js/chunk-vendors.f37ef52f.js HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-1b761c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1799708,"size_decoded":400111,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23307)","md5":"72d6cdfc0e8f3bde94c5ee4e26426598","sha1":"1e6d14221f0c227f7d6d2c45866e98515ff53cb2","sha256":"18e9e04fb156e1c7b92b948fc9eae8f7968705e0bced1e743f94250be3cac7b9","sha512":"00c57267c1455ef2e286c405e787565532f829bab617a75c063ff1ab5e38c6b3a6efa7e8f2db72982c14c2cb57dfe952b805007e3f1fbd6722cd551e00b7cc5c","ssdeep":"6144:gE20bfEpqA4IzIb4vaXSvERtpVaDcQg6X4xCDvOmOTua8zDZfUjurbpxW2r:i0bMpqA4IzIb4vtwa5AYmfSbpxW2r","tlshash":"8335ec186a5af3549909c0dbe93b3c88d5ade18ab00b14e14f7197b31bb2347eb9dd13","first_seen":"2026-07-29T12:57:29.702458Z","last_seen":"2026-07-29T16:17:10.930106Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B01MDK70V9/61VIuidX1qL._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.530Z","timestamp":1785330076530,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B01MDK70V9/61VIuidX1qL._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 3+PAAemjyT4i3gnXsXO8WKAgtbiZn0QaP6KFY0yUsrLPTq5dbqiCnB19MOR8WLMSChZkBRKc4kI=\r\nx-amz-request-id: AQNZ4EM1YPB58H93\r\nDate: Wed, 29 Jul 2026 13:01:22 GMT\r\nLast-Modified: Wed, 22 May 2024 00:27:12 GMT\r\nETag: \"9172f5d60e1b534210351c01ca412699\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 112795\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":112795,"size_decoded":113193,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"9172f5d60e1b534210351c01ca412699","sha1":"608e3181c28622337379249cd40bfa693704945c","sha256":"7b1b4aa38407bdbfc39fc20a42e7eaa7a2298bc58335f5abca0a7303e1b38823","sha512":"3cb70c4c9796b2f3fc16e5c044c399c3b8ec66aaf7724724ab27b96e12ba773b2b911550ed3623c4d62febe1cb5756a5de0019ad09a0b8feb52eaa1af00add1d","ssdeep":"1536:boXSrDd6x7J+4OVyHJstTuXwCh14T2fz0tVibfbKNfsVoeha3DnsdkRceFu3fTYV:boOh6NJ+mWtT99SKNfp3Lsdhf0espF75","tlshash":"c7b312e5ffa61cd9f9abaa35921806e3d8127c2c61277e4981f7c44204ca7637c5d12e","first_seen":"2024-09-25T02:33:14Z","last_seen":"2026-07-29T16:17:10.923142Z","times_seen":89,"resource_available":false,"data":null}},"time_used":6389,"timings":{"blocked":-1,"dns":0,"connect":103,"send":0,"wait":132,"receive":1002,"ssl":5153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp11245/B08LVSFN4X/71B%2B4V5YhnL._AC_SL1251_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.548Z","timestamp":1785330076548,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp11245/B08LVSFN4X/71B%2B4V5YhnL._AC_SL1251_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: zlWA4InEeGGCqbDCEP9lrQMVEOWSgdzv6wFuAs8ZXKs2sr5TCeGcgxz7MIAnEyHu/5oClxpLKqQ=\r\nx-amz-request-id: VYS6P989D1QMNE3J\r\nDate: Wed, 29 Jul 2026 13:01:24 GMT\r\nLast-Modified: Wed, 22 May 2024 11:32:45 GMT\r\nETag: \"2af8b3822ba1a7b83feeacdfab462ba6\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 138848\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":138848,"size_decoded":139246,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1001x1246, components 3","md5":"2af8b3822ba1a7b83feeacdfab462ba6","sha1":"0f31c1bee2c9b8578d1edb18e9c2b3ef2b2a4921","sha256":"6f3a9650cd0da1e6afdc84634d1c8ba5c9af6d6cec7c9a34325ad6047229f3f6","sha512":"d2d7e93df0df9c23e92c23fefb03bd7d25ef49149e1f3ec5336d267eb5a66acd23384496757e5462292cc0b0cfc11e98ae2b13a7a872acff61b9c6679d1effac","ssdeep":"3072:CdNgWqpbW8dAcJjT+jmQdqEBKDv2ewqLylUoQwsh/Au+OleMssB:2NgFW8dbUmu3VayKoQx/Au+aB","tlshash":"37d3134a61d3a24ee729a9788a187ce51f417a171cdc6e968fd9cbe4c40ec007a7c05f","first_seen":"2024-12-07T19:06:39.412409Z","last_seen":"2026-07-29T16:17:10.90475Z","times_seen":51,"resource_available":false,"data":null}},"time_used":7765,"timings":{"blocked":7184,"dns":0,"connect":0,"send":0,"wait":114,"receive":467,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/banner/20260702/8ff5e01548324aadb8803939b89140aa.jpg","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.582Z","timestamp":1785330076582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/banner/20260702/8ff5e01548324aadb8803939b89140aa.jpg HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 02 Jul 2026 13:20:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":179670,"size_decoded":178985,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 860x380, components 3","md5":"8e2333f9493d2bab72c9d624def5e5ad","sha1":"4a3f75888bce75250af0259a824dd1cb40581290","sha256":"0c9cb3d2d1f3842f48ea1c303b91324cd70c049c2b95d650680df88fb8f51fdb","sha512":"0f49251176bf1fd1e338e00a227c16643fbe0c11fc2e3e3638e673f936509e952409206539352ed3c4e4c614c77940d7ff68cbc2b4dbfa768f47366995c86a52","ssdeep":"3072:G8NN3yUBM3OtyExO2zM/GYQluKXYwj0KUk9CiUbg9zzED/vqpnKbGhca5oEqVCU:GA3yUMOca9puKIGHDKg9zzSqpOaL2p","tlshash":"f704129b8e1975ef0e5982e650b3109e133a9271d37b309d8dc0afefd334969256089f","first_seen":"2026-07-29T12:57:29.636759Z","last_seen":"2026-07-29T16:17:10.929602Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/a69efab79f154ef49953c81804a87560.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.640Z","timestamp":1785330076640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/a69efab79f154ef49953c81804a87560.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 05:54:43 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":422311,"size_decoded":408486,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"fb4dfb52ca1ac50f4055d2d4db7eefe8","sha1":"65b4d195613b7871a5a98a47cea63a5ea701a587","sha256":"a49b8298bf41a0acb143735de864d1b38a6e26de76fa6dffe13523ec47f9bd2a","sha512":"16361a2ce7aabfe259b1facbddeca34d3217184241ae69740ec086de936e107167aafaf2f5a62b8910ed07524719140f6ccd77b5de6840aad82268d208cf03bf","ssdeep":"12288:Z/h7ZSIUfboEr4Dg7rVVcp86m2xZ9GBLnD9XH:BVE3kWoqDcy6m2dG7XH","tlshash":"ab94136a996dee1ae85787fd56b41ecb1211e232d3dd4cc1708bbcc130dbd6099a42e3","first_seen":"2026-07-29T12:57:29.712166Z","last_seen":"2026-07-29T16:17:10.931588Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1046,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1046,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/wap/api/index!home_sections.action?pageSize=24\u0026pageNum=1\u0026lang=en","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.905Z","timestamp":1785330075905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"POST /wap/api/index!home_sections.action?pageSize=24\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tiktokhkg.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tiktokhkg.cc\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline;filename=f.txt\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34925,"size_decoded":8641,"mime_type":"application/json","magic":"JSON text data","md5":"28b05207acf839908934f55adb3d35dd","sha1":"c47c52d9ba22c82966aa0cf13d26e6a8a1e88eb4","sha256":"e4178541e4d978927f8253e7ab5245313455bae1158b652950b4f21b01f5461f","sha512":"18b543a9054b5debf122c018716f0967ee2f22e781aacffa468396698f234f94d985daa290d285a3880a55e8d6248984e4bd70764da6b8783dcc129aaf4682ee","ssdeep":"768:1z6Tmr+IvwfXABeciucXYmwZG2GP84LE/6lSpEkPlTWlWpRYe7+n36H8qnBAfaFq:rphToEs","tlshash":"fdf275e9dea4312a8bac57c21cc275dcdafe716be7f45e4741d9ec09051c8ba7a08930","first_seen":"2026-07-29T12:57:29.768389Z","last_seen":"2026-07-29T13:02:10.821954Z","times_seen":3,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/434928de0f6541c990426ec173cac0d6.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.121Z","timestamp":1785330076121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/434928de0f6541c990426ec173cac0d6.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 22:00:03 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207734,"size_decoded":206103,"mime_type":"image/png","magic":"PNG image data, 880 x 880, 8-bit/color RGBA, non-interlaced","md5":"575a0270f8155b9346bafe4faf206dac","sha1":"6613c98042b670e1f54aa29c7f069d6a566c3734","sha256":"b5fc3c33f42b49c0db0aa4bcdfd83a16d33d539884ce5657da2603854bc00ce6","sha512":"5ab95721327f71585482709d30531fb9d33dc0f724539b3bf0bdaa98e10730689aa69a83260a012751b1866f73920086c06ab99f8b478d2cf43822f9d8474091","ssdeep":"3072:9+y+QOxgMWq6DktNKP8+kIVPzslxRUMiY5t4Gh98h0byzCqsPvr1o/q7wNns5R42:rtOmBktgkIBZvJcyedRIY4i4VpVU","tlshash":"22141294d7d88659e68fc0f588fb87c862c8c154d2023b9b9f2f98b074273574bd53a8","first_seen":"2026-07-29T12:57:29.680476Z","last_seen":"2026-07-29T16:17:10.931086Z","times_seen":4,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-17/d8cbfee4-dd06-4bbc-a3f7-7b317a6b9d97.png","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.567Z","timestamp":1785330076567,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-17/d8cbfee4-dd06-4bbc-a3f7-7b317a6b9d97.png HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: xEkFNXhBdHefJLkeffkbQfyRXexiV3NSoJ/n8cKVMpIYC/BP7SDtIYq6iftrVfzMVdn6Mp1aFAXBL/4GFqlNlydRTJPaqhdZ\r\nx-amz-request-id: 1EBB49VHGH8JJB9X\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Thu, 17 Apr 2025 14:03:01 GMT\r\nETag: \"53423d96f2d5928b5bede9446cf03664\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 143324\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":143324,"size_decoded":143780,"mime_type":"image/png","magic":"PNG image data, 577 x 576, 8-bit/color RGBA, non-interlaced","md5":"53423d96f2d5928b5bede9446cf03664","sha1":"678d8d886825ce17011b251aea8b54120efb7a66","sha256":"236e915a9aa977fdfa549da3afaf6cd9332bf1e2d3bc9b4916d6c46f5ebdb977","sha512":"91f731aeddc288164e76ec64d05440e448ce02bc0ac06dca5eb4b7969f99ddc3480b2a2909ef18f7b215fc4d707181b3853dd9490e5500eabd6690268c627693","ssdeep":"3072:+sxNKb0/kNpurfkLX01wKCnNtcklbtGQj8VWXTETRxaIghNm0:+sxcb7AUkiKCIs8+84XTWi","tlshash":"50e312d9ac432cd22bb25bfa73d146b9f6acf888229c026001c49357ba1f4d53dc5db6","first_seen":"2026-07-29T12:57:29.617324Z","last_seen":"2026-07-29T16:17:10.961637Z","times_seen":4,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":690,"dns":0,"connect":0,"send":0,"wait":107,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-11/4b10ced6-f35d-4efe-98fc-36fb60989e89.jpg","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.579Z","timestamp":1785330076579,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-11/4b10ced6-f35d-4efe-98fc-36fb60989e89.jpg HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: U2/MdDpEBmSfbI7hfHDaeVxhGNkF7FDMUyK/Nx4OlnqcCHc66iRqdgsio7P/iULmZ5UxGBXv9xnIq5vA+hX6cACR8Wpr7Fa5\r\nx-amz-request-id: 1EBAB3GAFH37QNCT\r\nDate: Wed, 29 Jul 2026 13:01:18 GMT\r\nLast-Modified: Thu, 10 Apr 2025 16:22:01 GMT\r\nETag: \"2d6fd96f0b04622242a7968684892508\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 18504\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18504,"size_decoded":18959,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 579x580, components 3","md5":"2d6fd96f0b04622242a7968684892508","sha1":"a89e30a5db8c4a8091e80c33305b2167c6abe786","sha256":"3357491a6931102a9559ab5b9c12c9c06b616876a728a51ef360008242bb4f37","sha512":"c44d226e7aab3ce64d3b0eb8a9a7140f1373d431476899bc619ff58412e53bd5841bf00a56090b70ccaba65cebdcd24f20781c18132633f88dfa19d3a581c8e7","ssdeep":"384:9aaTmrQXsUz8FogDi5Ieaj+Q1jZlIKz8VF4fbnG:9Mr0Jz8Fog0vJQ1ZPz8cG","tlshash":"6f825c074c098a83e62d97e4be426ded5f906748ed8136ff19234edbbc209374c5926b","first_seen":"2026-07-29T12:57:29.435859Z","last_seen":"2026-07-29T16:17:10.954073Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1159,"timings":{"blocked":1035,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/img/pc-side-5.370b4bbf.png","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.587Z","timestamp":1785330076587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/img/pc-side-5.370b4bbf.png HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-15347a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1389690,"size_decoded":1175542,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"4c97b61491b9f36e2ab7ae7d2c26ab7c","sha1":"aeec542cc26dcd293fbad89a8d547af190ca6d7b","sha256":"55eefaa435fd933de59eecfada7d77b935fb468a816a31e2376c216022dab0d9","sha512":"9236ab3e631b5f4d6ab679dcc6d3b5239af075acd8b481c4e724bc6f7cb14911b106d7f54c71625268b11f3c874e13556a9e9a0ba42e24e7b26bbe5896629bf3","ssdeep":"12288:x4OjnPac/HLzzTUWWbOxITyb8m3/wh1Gz5xC6cI7x+WYVEm1UDBlqJoy2wj79Hdd:xPjnyMHvRSReb8mozgFgWdm1JJj7RnH","tlshash":"fe2512c344a1e089d480b0fe087cb19e66654f75d760eeecf2780e9ab7795f4490c6ea","first_seen":"2026-07-29T12:57:29.87249Z","last_seen":"2026-07-29T16:17:10.950337Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1063,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1063,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/category/20260705/7461497d05b741b187e1957f10c7c257.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.643Z","timestamp":1785330076643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/category/20260705/7461497d05b741b187e1957f10c7c257.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:17 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sun, 05 Jul 2026 06:00:14 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1137970,"size_decoded":1129522,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"38420ca18d70667bbc787a2a0f205bcb","sha1":"d731214725b85872a2bf4c27e1208f759f91a38a","sha256":"be67c2000137adfed9b3c5904f2cd5bb95b0a6347fc45e8e576c3426e9f2cf92","sha512":"9214083bb48a335d10808e1d4922f0d91995dd0725cecef464c6b42879a14c678ab3dbb1540c5e1bdbf0d03a6e7b079226604cb8a7a7abf6609332fb3d9c1093","ssdeep":"24576:Ymnl9gWxO6DhMPkN1OS/gOj7h/SsEhvIPVumhawe+Mk78:YKOCO6lfN12OXNrgvItuMbem8","tlshash":"002523ac06da6b70ff8fe8b9c078503755ac289b512a51c24fda34d8750f8498f26e3d","first_seen":"2026-07-29T12:57:29.859742Z","last_seen":"2026-07-29T16:17:10.94916Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1043,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1043,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/js/chunk-e0b1cc06.4d8c6787.js","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.348Z","timestamp":1785330075348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/js/chunk-e0b1cc06.4d8c6787.js HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-992\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2450,"size_decoded":1614,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2450), with no line terminators","md5":"21830a2114c73335a49d790eaacc1cd4","sha1":"20911f95baf069e8c805fce775c0a43887da5de5","sha256":"d7c1b6be799a2897e11b79338d71b147ee6c2e521b155e805842d3c0fa042f21","sha512":"4b4d909839a352f43945d394cc1c012ccc262415fc5a77eb1adce931bb869fca12c7a0d7a7cf2ada3d7e6d1a7c823563e4ef415a8f285bf2879bc40e59a87263","ssdeep":"","tlshash":"3e51761d5082689c445ec326720ae75562b27fc790c0c8beb7789cd846d8da1531e77e","first_seen":"2026-07-29T12:57:29.675246Z","last_seen":"2026-07-29T16:17:10.907979Z","times_seen":4,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/8bb582d8d35342ada74f850a67007b78.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.118Z","timestamp":1785330076118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/8bb582d8d35342ada74f850a67007b78.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 21:59:03 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22581,"size_decoded":22604,"mime_type":"image/png","magic":"PNG image data, 230 x 230, 8-bit/color RGBA, non-interlaced","md5":"b0498c6107f53cec1ca89ba74d483b4c","sha1":"cddbb0cf47dc348b0d944069ad7ddc30e7023ac8","sha256":"11a6c4b14f26890be14a4810e98b563addef4e9d6d9e03087e721d5e65576207","sha512":"2d90aa200c2eb9fb2376b38e14f23db455120d6a8e5232a31d02c4a319724dd4d0576aa21c20d0b00ac8d4484d8bee27550e3e8d5834c7d01c07b09101f18567","ssdeep":"384:3vc763o5D03RyvJtHPQCUVfMSuX9TDxY+Zzzn6sTiIlsNRlOYR1sfd54:3vLohUyvHYCKuX95Y+ZzxiQsNR1R+1y","tlshash":"0ca2bf61a4f114ea9c4782b88847307871953826f3dbeeb6e2719c67ed802d30c1b777","first_seen":"2026-07-29T12:57:29.742119Z","last_seen":"2026-07-29T16:17:10.984632Z","times_seen":4,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.tiktokhkg.cc/uploads/site-brand/20260701/a7e650137d8c492ebfcedcd3c27607d1.png","fqdn":"admin.tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.124Z","timestamp":1785330076124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.tiktokhkg.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:36:16 GMT","end":"Fri, 25 Sep 2026 16:36:15 GMT"},"fingerprint":{"sha1":"67:03:A4:58:3E:CC:89:F6:0F:A0:6B:36:94:18:A8:75:F0:61:6A:44","sha256":"78:62:2B:C8:00:C9:CF:BA:BC:98:D3:EA:B5:95:90:AF:2E:CF:61:4F:09:5A:81:24:19:F5:CC:16:BD:E8:2B:D2"}}},"request":{"raw":"GET /uploads/site-brand/20260701/a7e650137d8c492ebfcedcd3c27607d1.png HTTP/1.1\r\nHost: admin.tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:16 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 30 Jun 2026 22:00:28 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":247046,"size_decoded":247547,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"46c1a86de601aa3bc7208c38514453be","sha1":"f6b78be4a2c90e83da232bdab6fe61b24644159f","sha256":"fd7a3c12e04fb99dec4cc3d911ba346c0919fe34033a565120478b4226647f4b","sha512":"0edda3032575ee35cc59cbe398e3e3ea45e8bcaa0b3d756e2c5a2b427d423391573870b5a9a5c8cbdd9114197c2758a5b311ccadf7f6425e51a7bba16018bebb","ssdeep":"6144:uqN1EbrLmGeVa+DidbdmYSZL466Em/fBKFmqRaquowq6:/12cVa/dszZwEmhxB5","tlshash":"5e3423fabef62f3b97cf787b585c93f0028432963249853e4f00e445e715466829a727","first_seen":"2026-07-29T12:57:29.260687Z","last_seen":"2026-07-29T16:17:10.956032Z","times_seen":4,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"admin.tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"admin.tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B00PNMFAY6/81yYRtwZZ3L._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.210.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.502Z","timestamp":1785330076502,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B00PNMFAY6/81yYRtwZZ3L._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: JtWM31WzlvgIKmjSVJ9u6KJN/15CMXtzOzt3trInn5CAnU1byCFcyZ9cl3pFJqbWgx95ctrglyc=\r\nx-amz-request-id: AQNV45C7YFPCJ4VC\r\nDate: Wed, 29 Jul 2026 13:01:22 GMT\r\nLast-Modified: Wed, 22 May 2024 03:17:25 GMT\r\nETag: \"7b5adc87da13ca1bfccb0202b9388d9b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 0f7a46561ea9358af65418aa36548b9133dec44b65bf081703fa0673d9ad5c13\r\nx-amz-meta-s3b-last-modified: 20230614T090607Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 314048\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":314048,"size_decoded":314579,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"7b5adc87da13ca1bfccb0202b9388d9b","sha1":"1b799ca01680b2939b5259fa21a93e11261305e6","sha256":"0f7a46561ea9358af65418aa36548b9133dec44b65bf081703fa0673d9ad5c13","sha512":"e2f4951bc86d70c46ebca882efddd15193e9c08de4b00a449a5b5887997904737f16cded2792be136acdcf9a26dbd60ac59861727b4b7226e54c5f6022e5c9ea","ssdeep":"6144:u+Ac33xx95XN8Hxyn8E4imIeLxj+kSTP8+UUqiBA64O5dNOU:ss9N9mI+xj+kKglia615dNOU","tlshash":"70642313e6cb28abc58e707d00dd17c2b962e1d1c4cd50679a8e2ea66c4b7dbbd3900d","first_seen":"2024-12-25T04:41:20.152218Z","last_seen":"2026-07-29T16:17:10.939534Z","times_seen":42,"resource_available":false,"data":null}},"time_used":7254,"timings":{"blocked":-1,"dns":7,"connect":102,"send":0,"wait":120,"receive":1912,"ssl":5112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-24/ade608d0-4466-4efa-a3be-014514b91353.png","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.524Z","timestamp":1785330076524,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-24/ade608d0-4466-4efa-a3be-014514b91353.png HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 8WDz4hC4iVOsIudPnyqLxO0s85aMz0B4xVFRIkksXAaZx3Z4NLwaGoj7H1nR63HENOSh1HBmfP9D8TCUEKNKlcoigHIAd9rO\r\nx-amz-request-id: G9PZTDS94C1ZPJ7S\r\nDate: Wed, 29 Jul 2026 13:01:17 GMT\r\nLast-Modified: Thu, 24 Apr 2025 15:25:12 GMT\r\nETag: \"88d5b483e981a4ef060a61dbfe08a911\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 138264\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":138264,"size_decoded":138720,"mime_type":"image/png","magic":"PNG image data, 577 x 575, 8-bit/color RGBA, non-interlaced","md5":"88d5b483e981a4ef060a61dbfe08a911","sha1":"1f2ca0a18271c25f8de873df86a8ca5fd2ec498a","sha256":"0e573205fca254bd2bb8eec7ec9d6ba382713c3ad13d352b1547467297391a92","sha512":"6813f98694597f1ed7375229ca7d510398a81d3b288d7a4e0d9ce7f9fdc5a4c3807deda7a24556ef4ffcb0d1d25656c253601635f3c96bfd2588f57230b22e2a","ssdeep":"3072:4rlbz+HnAQs+YDn9tJBmy0TKxpDbGQ4n4/hzQ8bza4vn1MVcrO:SgYD9pCGxpRh08bzvnuVcq","tlshash":"a7d3028ed58e4169ae1b8d4851893fd9ecc800d2cb1a8734cb53af617fa4e240d77b63","first_seen":"2026-07-29T12:57:29.704724Z","last_seen":"2026-07-29T16:17:10.95652Z","times_seen":4,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":96,"send":0,"wait":126,"receive":277,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/buyer/","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-29T13:01:12.491Z","timestamp":1785330072491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /buyer/ HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:12 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 27 Jul 2026 15:37:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a677b4f-2ead\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":11949,"size_decoded":3443,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7666), with CRLF line terminators","md5":"8e1a8cbf51cd2c7baadaad934e3529d5","sha1":"a7004c121e0de5f672d5e9997c6ef233007e0c71","sha256":"52c1e3b905a11734fe5a1441c62710439cc742bca46e1fd58b233e2bc1ef843a","sha512":"12bfe92b868206ad753d9f4a228a54e35acc00981b4717b6dc6bf50b979fd460dd334329ac6c272639171a301049870ca680d5e468578a43bacdf018e919453d","ssdeep":"96:R37fsq04uQiQ+BCApAHbWYEprl/lFWHxxnwdFdJX4YjEzRP0Rb7ei3:Rr0q0EApbYQl/lFcjwdFLDKQfe+","tlshash":"e3322d3dd700527eaaa9ce879e1cf719c5cb8d754431f048ba5f6c4baa78fd40262583","first_seen":"2026-07-29T12:57:29.547268Z","last_seen":"2026-07-29T16:17:10.947186Z","times_seen":4,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokhkg.cc/api/i18n-content/h5-footer?lang=en","fqdn":"tiktokhkg.cc","domain":"tiktokhkg.cc","tld":"cc"},"ip":{"addr":"118.107.59.195","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:15.834Z","timestamp":1785330075834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokhkg.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 16:31:02 GMT","end":"Fri, 25 Sep 2026 16:31:01 GMT"},"fingerprint":{"sha1":"07:92:50:81:F4:5D:7D:7C:D9:49:BE:CA:A7:06:47:40:04:FE:F8:46","sha256":"0E:EE:AD:3E:AB:73:E3:85:1C:73:FE:BE:06:E9:A9:4B:B8:BA:AC:79:5A:13:4D:FB:4E:97:1F:4F:27:52:78:98"}}},"request":{"raw":"GET /api/i18n-content/h5-footer?lang=en HTTP/1.1\r\nHost: tiktokhkg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/buyer/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 29 Jul 2026 13:01:15 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8160,"size_decoded":3143,"mime_type":"application/json","magic":"JSON text data","md5":"0b99f0b87d39327dcf329e897ab472f3","sha1":"f780fe278eb7a80b32a33ca1595fca2cf1488714","sha256":"69a93504f3966e8af8698fd4f36f303747c01657e2efd5aa8e4ddbd560d5cc14","sha512":"205dc3153bd018b85110660e539dd1611f97cc7ead71c825a4bd9ebc263924ba9dcd7d5073cdd2ad6f78803b8a6bea72f6d24aac580d65085c2d4e1a968b8b39","ssdeep":"96:Rupxa9qKx3qD3w7Kxc8r3PHiQTG0xsXYGwFF6CfkSNkqiDbENX74TCFY/PMSt/mv:R4SqKxY30a3r3fiQTG0KDwFDclnEfHr","tlshash":"dff151bb46a8d9378bc17bc171c75e4952625203e888ac1fea45ce9cc5f83a312b7391","first_seen":"2026-07-29T12:57:29.572275Z","last_seen":"2026-07-29T13:02:10.778589Z","times_seen":3,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"tiktokhkg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"tiktokhkg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admi-server.s3.amazonaws.com/goods/2025-04-28/6a8e225b-bc3d-44b0-b4ea-7d0a89350ae1.png","fqdn":"admi-server.s3.amazonaws.com","domain":"admi-server.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokhkg.cc/buyer/","date":"2026-07-29T13:01:16.525Z","timestamp":1785330076525,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2025-04-28/6a8e225b-bc3d-44b0-b4ea-7d0a89350ae1.png HTTP/1.1\r\nHost: admi-server.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tiktokhkg.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 11taOcGa9oKN5FfColjkIR1iM0v+qZ7hqb8mrB9p2OLAjWFaVIP/lUJRaTalnpFlXQRMWBBk0XCh0xjpMcAGPNZlhvH4A5Q9\r\nx-amz-request-id: G9PH0FRWT8S9F75Z\r\nDate: Wed, 29 Jul 2026 13:01:17 GMT\r\nLast-Modified: Mon, 28 Apr 2025 15:09:59 GMT\r\nETag: \"77f5ff8818c85b9d9ae5ac40e1c07532\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 143353\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":143353,"size_decoded":143809,"mime_type":"image/png","magic":"PNG image data, 577 x 575, 8-bit/color RGBA, non-interlaced","md5":"77f5ff8818c85b9d9ae5ac40e1c07532","sha1":"093184a0379c066dded680e47ae3acedd856fab2","sha256":"be722836bda20f3afeeb900de6b2602fd465083e3f81f486a855fe69633f53d2","sha512":"cd2f553e5d57b66730b941e16c1a3daa530ae7d1398b1687e59b80aefea91530aa2f2d6ab69127ca1b0d8d178b3e58f4f358c2f45c976999554067edb17e3d87","ssdeep":"3072:4NFzwXMJWWpEyPqwUQhQ6m381kIioeVGxlIRb8iAzu8macPg:EFzw89Oyy87081klVGQR8iA68mXg","tlshash":"24e3122a33d26c2f92e87b5801a9098c9f5742f2f94191aad1d1fb74791f223815eeb4","first_seen":"2026-07-29T12:57:29.361171Z","last_seen":"2026-07-29T16:17:10.927333Z","times_seen":4,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":-1,"dns":0,"connect":97,"send":0,"wait":127,"receive":277,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}