{"report_id":"19ebab41-660a-4c2e-a90e-617e13b0b073","version":6,"status":"done","tags":["netflix","phishing"],"date":"2026-06-07T00:27:46Z","url":{"schema":"http","addr":"naifei.win","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"104.21.12.175","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"naifei.win/#/login","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"title":"Netflix","dom":{"size":27656,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15073)","md5":"6132fe4bdaf1bcac8f8ec17e06af6371","sha1":"231e0ed1656802d93536cbbf2f8908ce61812856","sha256":"4bc2b6ec6d691672db7c42a72f1fd0e6e14ed254e09633ab3524530466368dee","sha512":"6a4f71e907e13513210db9fcf1fd68a9e01afa543731986c1668ccf3848167fa1b0a7c362e187dfd9043426656a14cca157014f323bbdb0a6d660b5da3225334","ssdeep":"384:ADq/C1YKkBzsju8pk9X+OIjlYAuN4qb29ncWJZX6Xm3jTn46RyefTkf3mU:HCxmoXp4+OI+A1qgKqTHRyeLkOU","tlshash":"34c2e83f1c4c182b5253e5d5a4bae70974b3590f8a4ea8003e6c53544ff6c789dbcea8","dom_hash":"domhash8a01ff5a44924784f53d61203d23df7c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"naifei.win","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"104.21.12.175","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-12T00:27:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"naifei.win","ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-31","domain_rank":0,"first_seen":"2026-06-06T14:48:42.441735Z","last_seen":"2026-06-06T14:48:42.441735Z","alert_count":160,"request_count":32,"received_data":2238272,"sent_data":14242,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.iconify.design","ip":{"addr":"104.26.13.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-17","domain_rank":89604,"first_seen":"2018-12-24T02:01:40Z","last_seen":"2026-06-04T19:00:58.918913Z","alert_count":0,"request_count":1,"received_data":1305,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.naifei.win","ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-31","domain_rank":0,"first_seen":"2026-06-06T14:48:42.439354Z","last_seen":"2026-06-06T14:48:42.439354Z","alert_count":40,"request_count":10,"received_data":166879,"sent_data":5170,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-06-03T20:20:47.953717Z","alert_count":0,"request_count":1,"received_data":116674,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-31T22:18:21.058888Z","alert_count":0,"request_count":1,"received_data":35759,"sent_data":517,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"naifei.win/","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10568b780a0d314b06f4ae6be4a339f7","sha1":"2c0ba855511dbe4d8ce3bf061282976a34fd375f","sha256":"97611d5571f8e91da4b84e7fed039c19126ed0d05a358286b229ee99b23e61d4","sha512":"f1d5ba897fc7e7481668825a9b1fc036114a015a88759f3df8a3f52521648c16dcf66dd17116a513a7ccbc3f4d62eff48fde1b11b4905917762aec42d1009705","ssdeep":"96:nfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHs:nfkdoq1aBIBksXZhu8M0k9X+T60YDs","tlshash":"beb1991b69e56468a703b0ba8c3fa406b521042f099cbd407e0cd7769f8953daab4edd","size":5554,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.018709Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-06-09T16:29:13.144087Z","times_seen":1621,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/index-DyjyQnb2.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"116dc791778ef83404fc9476d2b4297d","sha1":"8c7fc3231be44ffe55f8387c4642145bc55ea009","sha256":"5b9cbdf925470cfe779a2b944de6f49801b768a5a4234d585f6951eeadcede6f","sha512":"9727cd61f7e31d7e505c36753d442eef10bcefb4f8b4f876099c51a265bccb062b981e984656f230dc68cf0e6c3277d7c917379ac628a5d628f1c3514e75b597","ssdeep":"12288:QAoyyS2Zvpm1z0inNBPFba+vaqCtdepVo26lse:xoyySmGNNBPYOaDd7N","tlshash":"4955a1285a2bf344e459c0d7fa373c84c59de18aa00764d15fb54bb31ba2793eaacd13","size":1311528,"data":"","first_seen":"2026-06-05T01:40:55.78797Z","last_seen":"2026-06-07T00:27:53.712454Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/LangLabel.vue_vue_type_script_setup_true_lang-B8XDZAHb.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cd897f4e493ad6016a0e573dde93d5d9","sha1":"cefcd792b3e21f5dc2fbce77894cc8209a15e22a","sha256":"a498d9617ba85cb3d0b706cb921e0f448ae82313887a0ab2a2897d738ea8f626","sha512":"1c199209b1fb44ad33343ad146259ad986717b43278638369fe54defb5f094e6be0a8bf1d1524c29b1073d38918aa66b02e649eb17269fb5d90c1f45429017af","ssdeep":"96:iYTAPvxQaJ+TBub9QotCMFyCfiM/8ATAPvxQaJ+z+fHNyQC+ORPORtrcqKno0J1b:iYkxQaJoBG9dtDFqjAkxQaJHvvDs1z","tlshash":"95d1f9b9c652de3c792e00cc55a038846ccd6dbf90b86095baf7462df7da07089367e9","size":6284,"data":"","first_seen":"2026-06-05T01:40:55.75645Z","last_seen":"2026-06-07T00:27:53.668074Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/#/login","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3e28ea9fb2984b5a5dcced864d88f27a","sha1":"8fb96c963cf13b818018c1b9c7610bb921b001d6","sha256":"852dd22b1ed70c8e5cf0e752395cb21580dfc3229553042d22aea633cce1bd59","sha512":"10bc31043d8829d457c8124d5608e485b94e849bf6f1429ddc334e55eea84a82dfc35cea4542d26e9562f93aa80711925715e69f3dcb62ca4f5e216776f00044","ssdeep":"","tlshash":"3cc08cc8a0c22d201602661010ef26e490384027b0481b038d94d8482e630b48233ea8","size":142,"data":"","first_seen":"2023-06-07T15:49:18Z","last_seen":"2026-06-09T02:08:26.715791Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/service-BEez6ewO.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ece3283f19d1f663621e1e53a87be09","sha1":"69e3a6bf62f474891735b2af6579b9d74cf166f0","sha256":"4801a9a9720092654b4cb96b855cd38dac9d45b360bc76060bf647d93769e953","sha512":"9755dbe6bf35097aa9f93b2f7bf69dba2a8a930b7ec58fceedbb08ec80a7378a9b217df9e42a26ea00a7f7de052e0f6729c28608a2403b85acd7b43c956da527","ssdeep":"384:apPgK5a28wa8H5tc5YUOWoJOy1vUHwmUM36:6PBajwa8ZqyvOcUQmW","tlshash":"4ca2a17b00b007b6fbf19324f101f8a627891e876856a5f38dbf436299910e7b5cb65c","size":21707,"data":"","first_seen":"2026-06-05T01:40:55.763982Z","last_seen":"2026-06-07T00:27:53.704558Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/ContainerForm-Cebpp8a3.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b8043d7423b961c55ee7111c0bd31b25","sha1":"feb562ada0b85cfa54f95bed1298ec37ee8c3d8c","sha256":"d16aad9185a6d7a42a01ecc839d5b836b664397c38ff5c5531e18a54b6a92b2c","sha512":"83a0ccf3c3d0a342118244738b9340cf7ac3bd386ecaec96802a4bee0e8fe3e8d44b38c5a55c96d3bc03665b95f08eb1e0dc3f36c3c0d894225ee7f5e0772ceb","ssdeep":"","tlshash":"f1d0220cac90a3bb8012098c33662437de9e3f2633b4cd42105b86618b165af328ef4c","size":217,"data":"","first_seen":"2026-06-05T01:40:55.725702Z","last_seen":"2026-06-07T00:27:53.669317Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/BaseHelpBtn.vue_vue_type_script_setup_true_lang-DeyqDHQW.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"29b54757a0b3ae9fa432d9c4dfd1b003","sha1":"97f4c52500ce6c1d2f1e2f57868aab4735354bdd","sha256":"7a3176f5eff7063498a8cb95681512036750eff86ceda6a9d252bd33fa9cf256","sha512":"ef56549b5ded7e858e6fdc6af72824710b4c882cfafdaab0e9419725a196d5ec86d366f904ba3b5f988b8c4b5ea89c536b71ec61a96313d27d9c5af41a6ee748","ssdeep":"","tlshash":"bc318699b8178bbde2b38d394e02901c91498f4ed526d24531ecc5126bc7c3c6b99b68","size":1691,"data":"","first_seen":"2026-06-05T01:40:55.739716Z","last_seen":"2026-06-07T00:27:53.705285Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/index-oh6TOCvk.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"232d22c74a6a630c0f8c54133766b798","sha1":"2fed1c3058b3463cdd1febd2dfcdf47db091e011","sha256":"431966b1350dea1c9bdd07b30c6d39e0988a1193902ed7b94fffbefc6627463b","sha512":"ba217c6266112818248bdd2b724ef6190a2c7c2da1959f3ea86ee88517ca120d1a8e5b086193365bfabda5caee71353f0b3442123d5ac5df1dc274d78dda2079","ssdeep":"","tlshash":"0151946d7dd88a39caff4d8404670912a91f0b18661488f1e4ae6e9c2b3e554b13ff2d","size":2895,"data":"","first_seen":"2026-06-05T01:40:55.741639Z","last_seen":"2026-06-07T00:27:53.695872Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/#/login","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-09T22:52:27.075598Z","times_seen":5658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/#/login","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1d4700e7818854aec11dc4d0591f9626","sha1":"33b2ac2baa38752d6f1edf04c37521182691204a","sha256":"1d5965d8f785900972e887d8981bd26afd51aab614536dce2510a27167b51ff0","sha512":"dfb9f4efd73dc16da30a73a6b0e794e4eb49d92babe6f730363281d2c54dff1e8efb16873a9c361b8531368e7efc4cf6eba61d56628671e7a996ed795a17eebb","ssdeep":"","tlshash":"89c08cc4a0c22e005606641011af24e49028402670481b028ca9d8582e220b08233e98","size":136,"data":"","first_seen":"2023-06-28T20:43:13Z","last_seen":"2026-06-09T18:59:38.765715Z","times_seen":12896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/login-CPIaCRnu.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1752dbf0326adede82cb7a6469a4ed30","sha1":"c1d17bd9ec8490de964c6c8507907072c9d6a212","sha256":"2cd401b8502ee2296069635a8d804a4b9c1ab5b6e9191a8cd6ee89611b923ece","sha512":"2b9879d459b6474773e96f16e55e1fe4d7066da4039debf618999e768e860a418e554882db7a5b79958096abef4e0136a877c6077a4d2f1b15fbab500568d2b3","ssdeep":"1536:eqa/iNr3z0WOnLoZN44KDWRtNh7+jTqCUETbykObGAE:eqawDo5n8ZO4SQtr7Ke10GRbC","tlshash":"3853602890b98ffdacbb5115744b8c15e20e5fffc1059a2792fd0a16afa1de097b0358","size":62964,"data":"","first_seen":"2026-06-05T01:40:55.74349Z","last_seen":"2026-06-07T00:27:53.696658Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/BaseLogo.vue_vue_type_script_setup_true_lang-B_aCqRcb.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ca3a8c549c4419639229b0b708913bee","sha1":"e66b2b37549f174bc4ba4c71b67c3b32922761a8","sha256":"3f5cbf741c859e27e928c820731c05d1799b608e4b3ee93c17b234e2fc3a4ab4","sha512":"841c8a80055be5de723f3a102bd71c99ba907e0a0dfc95afc24dc3ffabfa9d82ec07d1601dbe31dca97d9faaf3f8ebb4ad15e7416d5fdc11792e6efcd02b66c4","ssdeep":"","tlshash":"8ff0260fac6c81fd91e70414264b508111488f6dc635de40f2f52335a741c5eb45ff38","size":579,"data":"","first_seen":"2026-06-05T01:40:55.750313Z","last_seen":"2026-06-07T00:27:53.685071Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/#/login","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"94d71ca3d432c5a150ba0fec148bec8a","sha1":"f149c8d29e80003d26ed2e460cf5890f8bf67978","sha256":"5c8151446c3fb9fb384c25e941b64d83149cba01d5a7905fd2844d6b4679114d","sha512":"9e345046d828729d97f78fe91cdc987f97e0088d6de76d2171141348aec8b658006105e5172bfb5845491d5782b26c57a8c4245f30fab81daf9bd33adbc71ce3","ssdeep":"","tlshash":"24c08cc4a0c62d001602681010af34e49024402670481b428c94ec882e230b08233eac","size":139,"data":"","first_seen":"2023-09-13T19:31:22Z","last_seen":"2026-06-09T10:25:13.441206Z","times_seen":856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/#/login","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2c1c2af3114775a4f73c89df88d3a835","sha1":"42b39960dd2239bef7899a77b6ec8ca6159450b8","sha256":"19c20226c2b09b5432f4d3e8028bb5b3d6180be4eeec02c95620351ff5dc4b16","sha512":"c202636d47f4daefd8a6257e3c932c2d248227b55b17f8c9e91e6f28169c3c91f8680893fd843c8ff8e4cb7db506d302c554391c6610b7d98dd65c4fd19cb2eb","ssdeep":"","tlshash":"79c08cc4a0c32d101e02642014bf28e8a0244027b0881b0a8c94dc492e220f0923be98","size":144,"data":"","first_seen":"2024-02-01T11:14:23Z","last_seen":"2026-06-08T09:25:51.142289Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7d4fbff71549398ceffe8189db57c5b","sha1":"9ddc56ef19489e0d21f74eebc29c92b469ae6fd4","sha256":"ca663f53ed1b54e1f40c4b17ba2257f76179690249527bf88d268d9d178995a3","sha512":"bb5e60f5eec27743c6cfb79705632ad071bd6cdfffb44d8f0ce4e2c884c1bb531e06e6aa80bee647986c34bb4bad620495cd48c61e8d30441914687444b03b1b","ssdeep":"","tlshash":"e3f09e1b1886b07e53d760b6593bad5b322a11472c5119077d4c80242fe083d7ef5fde","size":623,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.019407Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/BaseInput.vue_vue_type_style_index_0_lang-eFZMLn8t.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ba86b432a227b16e879e9a9e0cc7829c","sha1":"7d165b677e82f62263848d2f23be3cd48a167e8d","sha256":"e95a6837a9f4e89362a5cb96d3ea1f8e2b200a4f3c85981cbd57d4ae0d945882","sha512":"2cbe897e2369e5c2eccef99441272246e58eb4386ac5361f12a6f251f371210d5de172e567ae8fa43fcfb3e8f11ef61f8da651e03977b3234fd16f53d8db34c8","ssdeep":"","tlshash":"5c415208e86aaff2d5b3d5a961eb4c30f0152b5bd641891110b94a292f8cee0533ef9c","size":2362,"data":"","first_seen":"2026-06-05T01:40:55.72881Z","last_seen":"2026-06-07T00:27:53.709012Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/#/login","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"76811db4a3d5546de19bc46f245652b4","sha1":"065ddba5bf95b5d1f278bb4a908a53fc4f0a41b2","sha256":"237e40d42319f90c108ee79382b7200ea26929d92fe7799cf0bd33efc343ebfa","sha512":"f7d218cf377027fbcbadd061e0a97768fe6955ff69385e531406117b74cd36e368441724eabbcca6f4424131d73e6f50baf10591dde8509fefd6f7cfa727dcf6","ssdeep":"","tlshash":"efc08cc8a0c22d002602a61020af39e4b038802b70485b128da4de483e630f58233e9c","size":147,"data":"","first_seen":"2023-10-29T04:01:47Z","last_seen":"2026-06-08T09:25:51.139232Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/#/login","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-09T19:08:33.145281Z","times_seen":4125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/#/login","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-09T22:52:27.078157Z","times_seen":6533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/default-CrDw-A8P.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f077f531aca40a5e9ecad5e44c34b695","sha1":"fea8a9c1fdc02f654d75bba0c21670892fa68b8c","sha256":"e46c7b50ffccb976d2677634a1ee63fb26cf4d0bcf5d4ee649b72fec4724e74e","sha512":"3ee837545d09602a68d43b537bf1325ac15d338772151f1f9b268b6785ba18f2cca3481d73957b6c734b15ef13e70ab1a38b9f4aec595f2783d11b3a00a27a85","ssdeep":"1536:6CKnwDThhG9CrZFnUqifSWX8k1KQOjO8l4dghqlkVzH8o82I0t:6lSTq9SDnsfP8mGjOG43lszH8Ty","tlshash":"73b37d504801da7ad5b3245424a94840fecf2fe7d12ed275f2fd23699be6c742b2d2e8","size":116727,"data":"","first_seen":"2026-06-05T01:40:55.754758Z","last_seen":"2026-06-07T00:27:53.688149Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/#/login","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f325222a758aeaf467ffd9902267b129","sha1":"ebb95b3866ab29d0ee9bb0755384b81ab12e000e","sha256":"cb11ef6823d7949b57e01ab9d6bb5c829be6b14322aa0dd5897a6d2d209d0672","sha512":"aa743a98e2ffb65897bee06760376bb5dbb7c2f10613ca12c8cc462ae79e1d3351855f14b3ea70088d449656bb4167061ab22d99f0eb628b9b63dc2a94131292","ssdeep":"","tlshash":"46c08cc4a0d26d001602641020af34e89024802674481b028c94d8482e220b09233ee8","size":138,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-06-09T19:22:39.734294Z","times_seen":2281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/#/login","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f325222a758aeaf467ffd9902267b129","sha1":"ebb95b3866ab29d0ee9bb0755384b81ab12e000e","sha256":"cb11ef6823d7949b57e01ab9d6bb5c829be6b14322aa0dd5897a6d2d209d0672","sha512":"aa743a98e2ffb65897bee06760376bb5dbb7c2f10613ca12c8cc462ae79e1d3351855f14b3ea70088d449656bb4167061ab22d99f0eb628b9b63dc2a94131292","ssdeep":"","tlshash":"46c08cc4a0d26d001602641020af34e89024802674481b028c94d8482e220b09233ee8","size":138,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-06-09T19:22:39.734294Z","times_seen":2281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/#/login","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"115e29b50b9087e3dcba6df87cbc7431","sha1":"478ab01b59274669d48732c700b3c868a34b7a78","sha256":"01e537892b16da64858fafaf493cdd3e29f01e4a3bd248bc91f42433c556f1e6","sha512":"5564200a26d435bbaa9b82dc0c7d3c17eacb022d055c55b232658412459b71a22d1c59254b79ab2ba497b98842d360184b8465cd16b1a436c8f10f0adcca8e06","ssdeep":"","tlshash":"e1c08cc8a0c66d001a02685124bf26e8a024842b70481b028cd4d8482e220f09233e98","size":145,"data":"","first_seen":"2023-08-30T16:45:15Z","last_seen":"2026-06-08T09:25:51.132063Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/#/login","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7144169280a69b1c180a70c7fb7c5047","sha1":"286b077ac1ddc843cb5a34c0310fec82d7628167","sha256":"0860f78a352e55f64ab8fa11ce266c6b60f40f4ee95040204fc70884babac6e9","sha512":"2cca64caa2a5ff4fdc390e7127fd89645a0e80135214f066e068f14d9726fdc0965fa5a9e79d7222283d8e0e12c90fd504367f81ae5fb580e3c1bc4c84a12f68","ssdeep":"","tlshash":"edc02bc5b0c33d101602641010bf38e490344027704c1b43ccd4dc583e230f08233edc","size":135,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-06-09T16:29:13.231642Z","times_seen":493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/iconify-riNqazxL.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6203da7086ac50bb8e6ced9831ff1d62","sha1":"c49d8a1de50bd8d3da782352dd6e044e750a72b7","sha256":"d4857cbb9e324c1ee619aac34ab96bb1d01fcd2b667d9b4dbdca6035b2f2b19a","sha512":"7f6457851863dd8526c3bc7916ae09214734d8e72210b1a3354a2fe86654f62cb5523c9ae9be7ebeb00f96997e826255b20facb91c5c6fe79d8bc913b7cd2aae","ssdeep":"384:21tm5sC7Ie5EdFlO0+x4cGXDnE4VfPIX8+896922l4EsQmW3Mc7mWP9+aFrSTyhE:2iG4Ie5MFlOTx4DEIfO8+8969226EsGQ","tlshash":"aa92f7b47156b02207e008e050ba0517f22d5612395bc4c5f39eece7ac7765e64f6fae","size":20463,"data":"","first_seen":"2026-06-05T01:40:55.748446Z","last_seen":"2026-06-07T00:27:53.695066Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"caad72fe48a09f8a060e5dd1477935fa","sha1":"f2b5ddb3021c1d3b5df6a518c7b555a7ffaeba39","sha256":"3097fffe06a687f15fda650f93d6f5303679a4fc78db9645da44a7aa4fa902fb","sha512":"1ad398a20e4693fe3fcd02aa2ffd3fa8f2c7bc1cafdc3778ed28300852491cc74174c17f930f387a3d75c02a35aa21100f56df21ee41f5222850cea0d1edee06","ssdeep":"","tlshash":"b731682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1591,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.020035Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c771a56c31bff8ba6299f63241568899","sha1":"3d6509d1f412e744a937e891546180b1093f7ccd","sha256":"c0b3a74335ec3f96e25be399971bafea9e3513f821dd3b4009608de199fd4f2a","sha512":"f859c02090a494b60671d2dea13324fc38d926b315de977edb5889e587917facd9d2e4c1e73e0edb3f0112b5af30b8d05d33a173612c81f4cdbcab5bcf47a03c","ssdeep":"","tlshash":"7b0128e59986483146db31fa2a9e301070318003b908beb0386f15446fdd33ed3f6bd8","size":689,"data":"","first_seen":"2024-11-20T07:54:53.452195Z","last_seen":"2026-06-07T05:03:57.027217Z","times_seen":489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/BaseUserTab.vue_vue_type_style_index_0_lang-7GyIN_XH.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"29d3c280537508181893fcd2dc9e3bd1","sha1":"84a0a4f49f096f629bf47eb80e3ff00f13dd33f1","sha256":"ca0947c61b0065f70599f91d36ae026f381b263a0071620b2730d3c91dd29a77","sha512":"9cde8d5b50c9081059d930acdd46fc400584e8661ea924330d989ec8a0a1f4c7b1d22635a0ce9d50741528b801833cfe6faed544e9ed2bb49e2a6a6ead1cdc9e","ssdeep":"","tlshash":"8b01d0cc9ce9cbb9d09605502ac6106890915f58a328c89170586d21534fca0e7cd33c","size":732,"data":"","first_seen":"2026-06-05T01:40:55.722797Z","last_seen":"2026-06-07T00:27:53.703166Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/#/login","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0a135a3820c44612d285347e945db1a0","sha1":"c751ab64ae029f5969e555a5dbec7dc15eb8f339","sha256":"6a02a962e9797eb8838be4ec5b3dbd47c5c6ced0fdee45ff8b242e92130a9d61","sha512":"92028e04908a6c3cdf03c75cf98c4678eb7bfbbdd11939716bad337599380d34293b296b7a059358cbdd3632a32b9f6b64f6768256fd20aa2efb83ff15d3a65f","ssdeep":"","tlshash":"6ec08cc4a0c23d001a22641068af34f4a034406ab14c1b528e94d8583e230f09233f98","size":147,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-06-09T02:19:17.713324Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a28e056a6989b49de8bf0c6fe7a9078e","sha1":"166889dc07218cf99767d4179177e393a87c50b5","sha256":"5adba9de6f8cd98bd9f208363a88990f71f45bc7eaa3b277fa7fc86d54f0ecbb","sha512":"5fca1b898fe0243788c1e8403086ea2b8f6374b3575b8c71ff971b969f1e1325eb301221aad3fa4f9447bb8df6c43021297674123c156e4fd1a322d5cd3cdcc9","ssdeep":"","tlshash":"acf0ab0b199008319707b17a2a7fec0a1e42201f29646671be0c95109fce97e4664d5c","size":506,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.026572Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"naifei.win/assets/ContainerForm-9KkiXSOC.css","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/ContainerForm-9KkiXSOC.css HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 28 Nov 2025 08:10:01 GMT\r\npriority: u=2,i=?0\r\netag: \"692958d9-2b\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9CtI1jsfi%2B%2FGs7q4wWgw2k5tBpAu8vn8%2Biy1iRaDT6DyVHztW1QLOVHo5BidCQD7l8PUuYtgKLTNoh20A4XU64VWNbFo9vKMShDw6WJiXkonrBBbcmmFDFNCyLHc\"}]}\r\ncontent-length: 43\r\ncf-ray: a07b87e9d8160b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"210bc0aef74b653b3356a9a9b785006d","sha1":"b77ab851a4963c96af01c55e7dafb33240202fdc","sha256":"4e418d51c9ed84b3998be57770f4d38289e5e8d86351b032b91fd304eedd2a49","sha512":"dc96806e9bdb062655a1d74a5b387b0d13121d6d4a427c31a5af4c23daf6378dd5073e051dca208189f335e6a31088d3149d6cb9d0503f6e27dde66172eb67ea","ssdeep":"","tlshash":"429002441980647ab501919d255402150604a84b84404e65a014595051d15f60051a58","first_seen":"2023-11-09T00:35:11Z","last_seen":"2026-06-09T09:38:27.852144Z","times_seen":179,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/LangLabel.vue_vue_type_script_setup_true_lang-B8XDZAHb.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/LangLabel.vue_vue_type_script_setup_true_lang-B8XDZAHb.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/assets/default-CrDw-A8P.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-188c\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gv6696I5Y%2BbkzR%2BoLhlz8Y1hgQoanvDPj4B7wNMXn7ZfrI0wGAGeCqZEU3x0SF%2FJ%2FtvkG2PeqyX%2BagfRW6r9%2BcQMsSQ6DXqE6diNFBojMl94GbkKycakZTRru5RH\"}]}\r\ncf-ray: a07b87eac82b0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6284,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6283)","md5":"cd897f4e493ad6016a0e573dde93d5d9","sha1":"cefcd792b3e21f5dc2fbce77894cc8209a15e22a","sha256":"a498d9617ba85cb3d0b706cb921e0f448ae82313887a0ab2a2897d738ea8f626","sha512":"1c199209b1fb44ad33343ad146259ad986717b43278638369fe54defb5f094e6be0a8bf1d1524c29b1073d38918aa66b02e649eb17269fb5d90c1f45429017af","ssdeep":"96:iYTAPvxQaJ+TBub9QotCMFyCfiM/8ATAPvxQaJ+z+fHNyQC+ORPORtrcqKno0J1b:iYkxQaJoBG9dtDFqjAkxQaJHvvDs1z","tlshash":"95d1f9b9c652de3c792e00cc55a038846ccd6dbf90b86095baf7462df7da07089367e9","first_seen":"2026-06-05T01:40:55.75645Z","last_seen":"2026-06-07T00:27:53.668074Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/ContainerForm-Cebpp8a3.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/ContainerForm-Cebpp8a3.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/assets/login-CPIaCRnu.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a1c09aa-d9\"\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tMstR5ESz3nVxLZ5VRVhVqFPPGj1xq%2Fx27jLe1ZmKzujvYVdBqm4K4ktFLV1QuC4cNc7kfjYVXmt%2FFah%2F4rPjqKLEEoHAuf%2B3Q1LKdfAsg8wCP234vgrGowSo5rn\"}]}\r\nage: 34744\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b87eae82f0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"b8043d7423b961c55ee7111c0bd31b25","sha1":"feb562ada0b85cfa54f95bed1298ec37ee8c3d8c","sha256":"d16aad9185a6d7a42a01ecc839d5b836b664397c38ff5c5531e18a54b6a92b2c","sha512":"83a0ccf3c3d0a342118244738b9340cf7ac3bd386ecaec96802a4bee0e8fe3e8d44b38c5a55c96d3bc03665b95f08eb1e0dc3f36c3c0d894225ee7f5e0772ceb","ssdeep":"","tlshash":"f1d0220cac90a3bb8012098c33662437de9e3f2633b4cd42105b86618b165af328ef4c","first_seen":"2026-06-05T01:40:55.725702Z","last_seen":"2026-06-07T00:27:53.669317Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.iconify.design/hugeicons.json?icons=globe-02","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"104.26.13.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 03:31:29 GMT","end":"Sat, 22 Aug 2026 04:31:21 GMT"},"fingerprint":{"sha1":"98:A3:D5:E3:BC:F2:61:7E:1A:64:85:90:7B:31:6E:77:4E:EE:97:65","sha256":"EC:93:44:7E:84:82:14:45:88:17:49:4E:8A:A3:78:4D:21:0B:85:20:D2:06:CF:1A:91:4D:75:58:5F:63:84:C9"}}},"request":{"raw":"GET /hugeicons.json?icons=globe-02 HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://naifei.win/\r\nOrigin: https://naifei.win\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDgAK%2BduK8ry4Q7LCI3ENKkstscZliRskbqLP0eFdmioVFweemf1Hqxk8p6MUaITBFEKazGRvivSYqBUPGeIl8gwnnBtoivzjCYbgqFVSnsb0v2qPfktmdIoxYZAKw9EcQPo3Q%3D%3D\"}]}\r\nage: 34743\r\nlast-modified: Sat, 06 Jun 2026 14:48:21 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a07b87ec7fd8dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":391,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"58aa81f4d7bb7c796abe798ec399b5ce","sha1":"1ea9e734db0e2bca6b38835b690532c1a42c969e","sha256":"83f95f1799501c357010f80a6b0bfed30d66e0aac49054359b0279c45fabf397","sha512":"70b529be7501d0addc4ce29db90c26b884559ae2810566dbcdc0c3ce90def70c0042dc229eb5c764cc0a229bc170ed719d2c17f89024607d829b3903febc764b","ssdeep":"","tlshash":"8fe061187320b52e7426709dc7587b66105a211237877154a4ee457c3125b2d76b3fe0","first_seen":"2026-06-05T01:40:55.731639Z","last_seen":"2026-06-07T00:27:53.670469Z","times_seen":5,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":44,"dns":21,"connect":1,"send":0,"wait":7,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.naifei.win/api/public/init?d=1780792044000","fqdn":"api.naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:24.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /api/public/init?d=1780792044000 HTTP/1.1\r\nHost: api.naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-ctime: 1780792044000\r\nst-ttgn: bf8c5caba0fb5cdd551cc23a87d2f442\r\nOrigin: https://naifei.win\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:24 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4B0x9tYc%2FxMffgF3R5xshO0VAjZxHZPO%2F%2FJtD%2F%2Fs%2FvmvZ%2BCLxJzidMRc87O%2FeMRB110HA53eNq%2BLq%2BJyWfxxOiCpvn2o%2Fl244AFKqKEfUnwoGLy0fXTHj%2BkCPaMZPNBVQg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://naifei.win\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a07b87e54ffe0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8946,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c46d415f6af50fa148b70ecd55a76abb","sha1":"b895b25a6ba0136d301053f9d136053a73a6adb8","sha256":"1aec2aa87ad5a91294524b07719a05e2a7f6e2e659f286ece1042659f6b1eeba","sha512":"0d28085459423cd916ec25877e308f04fc85a270235db2949b3e17ab936be24f8181f2eb8e37bd46a12fc8712b90d5631e4dac4078ae542822981b6129b12c72","ssdeep":"192:IlS2mL7HBO3y81UeSVMLMHv7N/kIDAzeA6dEFhgmiPYH:p/9/kha2yO","tlshash":"f402132920b5cc77d6e37dc92bc73105c96d3986fcdd8b565f39edaa01ac096012e913","first_seen":"2026-06-07T00:27:53.671782Z","last_seen":"2026-06-07T00:27:53.671782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.naifei.win/upload/img/6a1c15d0fae5.webp","fqdn":"api.naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:24.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /upload/img/6a1c15d0fae5.webp HTTP/1.1\r\nHost: api.naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:24 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 31 May 2026 11:04:48 GMT\r\npriority: u=4,i=?0\r\netag: \"6a1c15d0-3220\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=islMH68OrfeB9gSSmGEk0MxxZ4sOJ9QkqMigR2IE2g5%2BTeuM6OHwyv6dRxLKTWEHT5oQYmMySXbezSW8%2Bc300Qhmvj5%2FX%2BbpOunIalceU2EuaOc4ah2SOzAdNwk0uiZBTA%3D%3D\"}]}\r\ncontent-length: 12832\r\ncf-ray: a07b87e678010b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 204x204, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"335f4a3f77f57b2efd729782a7eb2356","sha1":"94d779e72d4232a1a072f6819ceb2ec3492dc55d","sha256":"63bd65837f267459bf80863f711f9ab9be0273d1ee702dce8538286fa75e40c7","sha512":"ff5ed65f33e9b6822fc22b87b3fe92ba5b54ffb7a8fd99d381644d18b90ddb858103e3015de5c485d0bf42966d106a130dc2f0ee0143e84d5bafaf10e3900780","ssdeep":"384:XFvsNMcBEeRIk++jIedQ81o/jvboyx7AKMbNv:XFbcBE/P5eSxRxLKNv","tlshash":"5e42d077cb8da5b8d4e94cf9bea3033af61b3d011eb510a11e04f4607b63c812e8512e","first_seen":"2026-06-05T01:40:55.751935Z","last_seen":"2026-06-07T00:27:53.674516Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/BaseLogo.vue_vue_type_script_setup_true_lang-B_aCqRcb.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-B_aCqRcb.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://naifei.win/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a1c09aa-243\"\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DAelvDNP0riSc2GLuQMl30w%2FxoPBH%2F9Be%2BTeafjg7z5AZKnqPVX9FUUbvnO8PeCJFjPONhChSCY0VpYaGPvMQM8kiqFZUNILqynZfOvOvhbPs8Dp1Sax6Zu0wXnM\"}]}\r\nage: 34744\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b87e9f81e0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":579,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (578)","md5":"ca3a8c549c4419639229b0b708913bee","sha1":"e66b2b37549f174bc4ba4c71b67c3b32922761a8","sha256":"3f5cbf741c859e27e928c820731c05d1799b608e4b3ee93c17b234e2fc3a4ab4","sha512":"841c8a80055be5de723f3a102bd71c99ba907e0a0dfc95afc24dc3ffabfa9d82ec07d1601dbe31dca97d9faaf3f8ebb4ad15e7416d5fdc11792e6efcd02b66c4","ssdeep":"","tlshash":"8ff0260fac6c81fd91e70414264b508111488f6dc635de40f2f52335a741c5eb45ff38","first_seen":"2026-06-05T01:40:55.750313Z","last_seen":"2026-06-07T00:27:53.685071Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/ContainerForm-Cebpp8a3.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/ContainerForm-Cebpp8a3.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://naifei.win/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a1c09aa-d9\"\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XB9UVticjiJEIS41CWGgag3BsJv%2FNUCHsaNtzErUTJ8XNFQJ%2Beexa5SC3k0VN%2BgT%2BzF6vzGCemuQupmXcZqTesfpjv8iv%2FIMFG0ujcBUQJVY2GqWr8RcdFqjMFnX\"}]}\r\nage: 34744\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b87ea18210b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"b8043d7423b961c55ee7111c0bd31b25","sha1":"feb562ada0b85cfa54f95bed1298ec37ee8c3d8c","sha256":"d16aad9185a6d7a42a01ecc839d5b836b664397c38ff5c5531e18a54b6a92b2c","sha512":"83a0ccf3c3d0a342118244738b9340cf7ac3bd386ecaec96802a4bee0e8fe3e8d44b38c5a55c96d3bc03665b95f08eb1e0dc3f36c3c0d894225ee7f5e0772ceb","ssdeep":"","tlshash":"f1d0220cac90a3bb8012098c33662437de9e3f2633b4cd42105b86618b165af328ef4c","first_seen":"2026-06-05T01:40:55.725702Z","last_seen":"2026-06-07T00:27:53.669317Z","times_seen":5,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/default-CrDw-A8P.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/default-CrDw-A8P.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/assets/index-DyjyQnb2.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-1c7f7\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRi8K4UVpD49I%2F7UCPp497Tm7BtiL1P2LcVPsbrp5Mak5FJCeQz3ltY%2BwWSLZ86wVG9z5wZ0ecAs03fC8WbChjG%2FdTvrndcOGD7iGte1xRex79%2B1HALy%2FzLRdzZ4\"}]}\r\ncf-ray: a07b87ea98290b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116727,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f077f531aca40a5e9ecad5e44c34b695","sha1":"fea8a9c1fdc02f654d75bba0c21670892fa68b8c","sha256":"e46c7b50ffccb976d2677634a1ee63fb26cf4d0bcf5d4ee649b72fec4724e74e","sha512":"3ee837545d09602a68d43b537bf1325ac15d338772151f1f9b268b6785ba18f2cca3481d73957b6c734b15ef13e70ab1a38b9f4aec595f2783d11b3a00a27a85","ssdeep":"1536:6CKnwDThhG9CrZFnUqifSWX8k1KQOjO8l4dghqlkVzH8o82I0t:6lSTq9SDnsfP8mGjOG43lszH8Ty","tlshash":"73b37d504801da7ad5b3245424a94840fecf2fe7d12ed275f2fd23699be6c742b2d2e8","first_seen":"2026-06-05T01:40:55.754758Z","last_seen":"2026-06-07T00:27:53.688149Z","times_seen":5,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:22.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.30.1\r\ndate: Sun, 07 Jun 2026 00:27:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Apr 2026 10:29:48 GMT\r\netag: W/\"69d2399c-1c675\"\r\nexpires: Thu, 11 Jun 2026 00:27:23 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-06-09T16:29:13.144087Z","times_seen":1621,"resource_available":true,"data":null}},"time_used":2200,"timings":{"blocked":1076,"dns":16,"connect":24,"send":0,"wait":46,"receive":0,"ssl":1035},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/index-BwT3Jl2c.css","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:22.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/index-BwT3Jl2c.css HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-5e04c\"\r\nexpires: Sun, 07 Jun 2026 02:48:18 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z5oiVPyLT%2B7OtzRe4AikbgCFNQjmwv0H30QfRiaQPJrbrmX2yAeD4l2uaWTWRjr2nOuD9IIl23OIjAzbSnrbYuF1WIs8m9a5pkVp7gIR0pZRRWrkGRopWjFUBEE1\"}]}\r\ncf-ray: a07b87d96f6d0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385100,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"49f928d01907898558b746380c52a0e3","sha1":"21658b70bf59e8b12fda993fbab424101b0c9f19","sha256":"c9780444ad35390bb5175b0ea00b6d709b749ff8882196c0e452295680a26180","sha512":"7917e953e3d7e4462e4bb8bba9fbe37d65f45b3b83d9265291bf7bdd6e0926cb28fa7708155893e52f7c568aae8ca307cb92bbe47576721d77e2dbe7c874fa2f","ssdeep":"6144:UnxsaeU8RUbwaJjvpqvXLXL+U6AXfSffRfFUZyRU/c8lImmucs:Un1eXeqj7mAXfSffRfFUZyRU/c8lImmI","tlshash":"cd844bb43bc4103dfe0bce329b6899dc612df162ef424994a50ab63447d73eb2563678","first_seen":"2026-05-07T09:48:22.053165Z","last_seen":"2026-06-08T09:25:51.117618Z","times_seen":17,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/favicon.ico","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:24.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:24 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zQsxe7v7w081XC0CFo%2Bb1moDZRz2SWXK8QgH2ApqiY2lkeu5BQVPv3TvYcouYliOHJfAG34nKlbKRb4RAsxo60Y22lakreHnRhhrdlohLEqnguSdl5XX8SdHoQR\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: a07b87e3eff60b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-06-10T00:54:03.064078Z","times_seen":279774,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.naifei.win/api/public/home?d=1780792044594\u0026language_type=en","fqdn":"api.naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:24.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"OPTIONS /api/public/home?d=1780792044594\u0026language_type=en HTTP/1.1\r\nHost: api.naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://naifei.win/\r\nOrigin: https://naifei.win\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:24 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://naifei.win\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n8Wh5PHwqv0iuxsdVH7IkN%2FNWWgWZ%2FmGzlrYMMhgket%2BjuR9t5%2BUt8%2BGYDcFfWhHiegXmC5mhkhHCvqinMfbyU1QO%2FcdLjFsO9kz2ake03LZyUNBaXumwv6JUMGl9qhD9w%3D%3D\"}]}\r\ncf-ray: a07b87e6c8050b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T01:14:21.666001Z","times_seen":16283523,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/iconify-riNqazxL.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/iconify-riNqazxL.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://naifei.win/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-4fef\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9NdPnJgfs%2FGgqNax1%2FVdx260JUIC86RPjayVhDrKSjvJg4S7n5Bj1FdX8eZw35%2BB%2BJ3BXoILEt8qBr3XBISm0jqwvSxNS6kGZ6YGuVXtByNcm4A665V74jntLNkx\"}]}\r\ncf-ray: a07b87e9f81a0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20463,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7050)","md5":"6203da7086ac50bb8e6ced9831ff1d62","sha1":"c49d8a1de50bd8d3da782352dd6e044e750a72b7","sha256":"d4857cbb9e324c1ee619aac34ab96bb1d01fcd2b667d9b4dbdca6035b2f2b19a","sha512":"7f6457851863dd8526c3bc7916ae09214734d8e72210b1a3354a2fe86654f62cb5523c9ae9be7ebeb00f96997e826255b20facb91c5c6fe79d8bc913b7cd2aae","ssdeep":"384:21tm5sC7Ie5EdFlO0+x4cGXDnE4VfPIX8+896922l4EsQmW3Mc7mWP9+aFrSTyhE:2iG4Ie5MFlOTx4DEIfO8+8969226EsGQ","tlshash":"aa92f7b47156b02207e008e050ba0517f22d5612395bc4c5f39eece7ac7765e64f6fae","first_seen":"2026-06-05T01:40:55.748446Z","last_seen":"2026-06-07T00:27:53.695066Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/index-oh6TOCvk.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/index-oh6TOCvk.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://naifei.win/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-b4f\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AHgVVSfK0A%2BET%2FQ9Ui2VNzaoN05MlF8CNRg%2BedSanNYTNRDJ3jz801Eddpi9CTn5kwcXx7w4KRY6zfz0TKk16x4IxedQRFaUJC7kAaX4hxdhRh5iVtGpEOBWBDMa\"}]}\r\ncf-ray: a07b87ea18220b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2895,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2894)","md5":"232d22c74a6a630c0f8c54133766b798","sha1":"2fed1c3058b3463cdd1febd2dfcdf47db091e011","sha256":"431966b1350dea1c9bdd07b30c6d39e0988a1193902ed7b94fffbefc6627463b","sha512":"ba217c6266112818248bdd2b724ef6190a2c7c2da1959f3ea86ee88517ca120d1a8e5b086193365bfabda5caee71353f0b3442123d5ac5df1dc274d78dda2079","ssdeep":"","tlshash":"0151946d7dd88a39caff4d8404670912a91f0b18661488f1e4ae6e9c2b3e554b13ff2d","first_seen":"2026-06-05T01:40:55.741639Z","last_seen":"2026-06-07T00:27:53.695872Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/login-CPIaCRnu.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/login-CPIaCRnu.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/assets/index-DyjyQnb2.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-f5f4\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZyqcH159fA7dmKkpPotTSwgyeYdAvqfnu88sUjYh%2B9zWKPARRPux%2FraqhyTUbTXtyucBVnIPM0ZovAZiwhTupaXKYzrqQMVMeg52DlQ6Lj8TcJ%2BggKoTOF8KY11\"}]}\r\ncf-ray: a07b87eaa82a0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62964,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (62963)","md5":"1752dbf0326adede82cb7a6469a4ed30","sha1":"c1d17bd9ec8490de964c6c8507907072c9d6a212","sha256":"2cd401b8502ee2296069635a8d804a4b9c1ab5b6e9191a8cd6ee89611b923ece","sha512":"2b9879d459b6474773e96f16e55e1fe4d7066da4039debf618999e768e860a418e554882db7a5b79958096abef4e0136a877c6077a4d2f1b15fbab500568d2b3","ssdeep":"1536:eqa/iNr3z0WOnLoZN44KDWRtNh7+jTqCUETbykObGAE:eqawDo5n8ZO4SQtr7Ke10GRbC","tlshash":"3853602890b98ffdacbb5115744b8c15e20e5fffc1059a2792fd0a16afa1de097b0358","first_seen":"2026-06-05T01:40:55.74349Z","last_seen":"2026-06-07T00:27:53.696658Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/iconify-riNqazxL.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/iconify-riNqazxL.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/assets/default-CrDw-A8P.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-4fef\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6CZCIXI6m%2B0RVYGr5dyHXzBs%2FwtWETNOK8Tf%2FWWrWga4LirNsv0bslxGJBKCQMs1AkYGW1WTQxoZ30qBQ8axIFLrR%2FjjKh14x%2FZK30NVsU7xI53pfV%2FoKg9FeGYC\"}]}\r\ncf-ray: a07b87eac82d0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20463,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7050)","md5":"6203da7086ac50bb8e6ced9831ff1d62","sha1":"c49d8a1de50bd8d3da782352dd6e044e750a72b7","sha256":"d4857cbb9e324c1ee619aac34ab96bb1d01fcd2b667d9b4dbdca6035b2f2b19a","sha512":"7f6457851863dd8526c3bc7916ae09214734d8e72210b1a3354a2fe86654f62cb5523c9ae9be7ebeb00f96997e826255b20facb91c5c6fe79d8bc913b7cd2aae","ssdeep":"384:21tm5sC7Ie5EdFlO0+x4cGXDnE4VfPIX8+896922l4EsQmW3Mc7mWP9+aFrSTyhE:2iG4Ie5MFlOTx4DEIfO8+8969226EsGQ","tlshash":"aa92f7b47156b02207e008e050ba0517f22d5612395bc4c5f39eece7ac7765e64f6fae","first_seen":"2026-06-05T01:40:55.748446Z","last_seen":"2026-06-07T00:27:53.695066Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-07T00:27:22.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jun 2026 00:27:22 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jrnexx1zkG0wsgOLNKiR4SBwO79E6L22AdSf2vDyVIDVkv247Q8vqK6XT2QfRMY2sirceply%2BXTpYRs8iUh4UdyWJJ7BtUe2Guye8qsnGjcimxbw1tlxQ8sNGqNJ\"}]}\r\nage: 4164\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b87d7798dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9709,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"2f27907951ccf65c6053e28b0849fa7c","sha1":"3ca5a42e78f56a9cf6084ebab1c1a4f421dbdfe8","sha256":"b07f16cc1fd284f7eaf57bc0072a9dcd8a6fd242dc45bcb6fc9a18b6d52c957a","sha512":"067599e84bfd0bda8ffc383006f6fea8375815f7657a4316537d2fe55405316deadd2fb5c4dfcee23f1bc1a4c300456dcbbd3912be5b10bd93ef49afd78081fe","ssdeep":"192:SUYfkdoq1aBIBksXZhu8M0k9X+T60YDIVkKy5cbjlxixIb8IuQGthsriMHLqQp:xYKkBzsju8pk9X+OIjlYAuN4qQp","tlshash":"9112fd5b2de560286303b0ba4d7ff50a7621001b1998fd003e0cd6755f8967dabb5eed","first_seen":"2026-06-05T01:40:55.758014Z","last_seen":"2026-06-07T00:27:53.6974Z","times_seen":5,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":53,"dns":30,"connect":1,"send":0,"wait":14,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.naifei.win/api/public/home?d=1780792044594\u0026language_type=en","fqdn":"api.naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:24.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /api/public/home?d=1780792044594\u0026language_type=en HTTP/1.1\r\nHost: api.naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-lang: en\r\nst-ctime: 1780792044594\r\nst-ttgn: f85afb596cde7da2f48d7e884f3982e1\r\nOrigin: https://naifei.win\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GPpH9Dm%2FDQ%2BAssoPNcsXZNlVH4P9kOzZZ10r565MnenntOFr3KzMsHxENbrWuuP06BGnCLi%2BeYuh5e0SBAabfRfZU9jiYNKcvCgRtEwxFQZTDU6a2EWuITTM0SGLIEnCxA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://naifei.win\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a07b87e8980f0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10101,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a457a47d3a5923c2f2ff6fd635f06908","sha1":"c50cf3c4fc1e6707b9e9a973673797bce6c7644f","sha256":"5cc552105939d95b9725bc3964c1aba41cd48a5e8fba0f07121a383e23e8e58d","sha512":"cd6fe074dea8a72d1bd7c2011be2c6a001f8ec36bb96b26bf9bfe3b9dc0b2ffbdfea14f67e27cbf4547284dbc864a9d9db30637a785546fd49f1b50fae39087e","ssdeep":"192:IQRTaMNI0waJpkyfechx1a5KDB3e6GBOZVu2V709qz+AI75HyEkGkH4h5V:7TnkNc1BMERuT15BkHe5V","tlshash":"c522649414b9c83657e242c22fcf399ace7d70966ec8af50db9fae5c40e41b1072b593","first_seen":"2026-06-07T00:27:53.698198Z","last_seen":"2026-06-07T00:27:53.698198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.naifei.win/upload/img/6a1c15bd313c.webp","fqdn":"api.naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /upload/img/6a1c15bd313c.webp HTTP/1.1\r\nHost: api.naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 31 May 2026 11:04:29 GMT\r\npriority: u=6,i=?0\r\netag: \"6a1c15bd-8b66\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=47TV0%2F2ikvGxI75PhjIXRgvEWZF1pkDmvA%2BGxKPZd59p5%2BxZykQ51DM1H3qSgNmcAJmoSkcLO6WECm3i4UH8Nf5HKhp2PkHeCm%2BUNNT4TV1fTV2A8n7NUtgJkFx4twBktA%3D%3D\"}]}\r\ncontent-length: 35686\r\ncf-ray: a07b87e968140b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35686,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 900x900, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9b764d72cf7e5b8c873395debffeb385","sha1":"2c292c88001d3541bc33b6284a7f89f3dc2bcaee","sha256":"0f7e73d0c08981d58032d561620d0a57e7eb9bae981f0dbb5572459e46f337a8","sha512":"c204c2f40b0af7a86bcee387a17cc25c9cb01cb3afb0b032bf678d873b3fa3479a467774d4392d6c35e0164660e1e6244309121f6c8aa53aca91051668aa6190","ssdeep":"768:cvOHXKsrz7TLydf6yKMsuv5HmGbW282LmzTHF0kvO:OsvPg6yKKD1ovF0kG","tlshash":"93f2f2d6d12a3253997a6b7a803fe5cb3b33ccb66b1a85924a3cc44072463f77c1a591","first_seen":"2026-06-05T01:40:55.737427Z","last_seen":"2026-06-07T00:27:53.70089Z","times_seen":5,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.naifei.win/upload/img/6a1c0a7f90cd.webp","fqdn":"api.naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /upload/img/6a1c0a7f90cd.webp HTTP/1.1\r\nHost: api.naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 31 May 2026 10:16:31 GMT\r\npriority: u=6,i=?0\r\netag: \"6a1c0a7f-8a62\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VazHY2BoRHxjlmvQFr2Wc0gdLloVyd0CrlwON%2F04QIgBGYPzDr%2BDPwzM4zTyfh7vTlHWOAGMIHBSkE9i5owCVWd38q51lpiWKyWAkVF%2BrUe74CPFnrsGEluMPpaR9GUprA%3D%3D\"}]}\r\ncontent-length: 35426\r\ncf-ray: a07b87e968130b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 900x900, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"59992e60b3f51327caeffea9f808cd66","sha1":"8d0549cded71a99ee27e959eaab4324e1d126f8d","sha256":"a693a52d7c4c1b260b1e84337119650249cdbaef1e1472ba8a13e9c4d36e96b2","sha512":"0ca687b99637bd608b676a104251284eeff0bc69b776df40f872b88dbe8b2f6dc7c393f7ec6d2e6d3c1c4afe4115d99174e8a486d0bded4a0c4220b225886522","ssdeep":"768:KWyUXuev46QWdUjAQ7fCatBtV2V02HXq52+5R5UUij2GdJdZGlcwD:KJUxv7dUjAQ7fCwtV2V08X7+5A2GDGm0","tlshash":"83f2e16c6ed4760b290985e97ff4441c99fba292850249a00be02f3bbeb37c5c40dcf5","first_seen":"2026-06-05T01:40:55.759668Z","last_seen":"2026-06-07T00:27:53.70175Z","times_seen":5,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/BaseUserTab-BT60kelY.css","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/BaseUserTab-BT60kelY.css HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: text/css\r\netag: W/\"692958d9-ca\"\r\nlast-modified: Fri, 28 Nov 2025 08:10:01 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eefRMJPKMrEbunF7HgLnjtdHg2MGTurJvNczTVGo6sibI0FTuVOnbBRDwds3J7kKmFc%2FMNlXpIYU4Kdi0ZhIyRA5x4hiKCN0TszRZE%2BHHtlYKp8oFvLoesgFg7m0\"}]}\r\nage: 34744\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b87e9f81b0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3ace283f720ee855e9ec72735473272c","sha1":"3a2531566e6ad7a59f49bbbdd46de777cd17068d","sha256":"30d3ce58fc5afaf19dce27f8c3983ac12c7845eed6234d787bc4a50d10fac2e4","sha512":"2375d38febb359046b9e11747dfadc1574dd057cef0d5325cac3a5ce13b601b0f7e6532ed4008146d0ea2bd04bee2d39c4ffad9374b905d6c202d79d77fa41d6","ssdeep":"","tlshash":"59d0220c1c40f07e24c431a80f4842ec08963205ff035ea43020bc3200c66f5203bc2f","first_seen":"2025-05-07T21:58:18.044711Z","last_seen":"2026-06-08T09:25:51.115148Z","times_seen":25,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/default-CrDw-A8P.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/default-CrDw-A8P.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://naifei.win/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-1c7f7\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GK3Y2Ld51sgIamb1EesD914VZDmNkKrnbGKFTxH1GAD%2FXzNWwaY3lxagS2weT%2Bc23LYN5rNq0eszY8%2FcQ2E7uTFbJnVwpYapCELqOoGt2rKSvvIpL7DVPXof%2B%2BPK\"}]}\r\ncf-ray: a07b87e9f81c0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116727,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f077f531aca40a5e9ecad5e44c34b695","sha1":"fea8a9c1fdc02f654d75bba0c21670892fa68b8c","sha256":"e46c7b50ffccb976d2677634a1ee63fb26cf4d0bcf5d4ee649b72fec4724e74e","sha512":"3ee837545d09602a68d43b537bf1325ac15d338772151f1f9b268b6785ba18f2cca3481d73957b6c734b15ef13e70ab1a38b9f4aec595f2783d11b3a00a27a85","ssdeep":"1536:6CKnwDThhG9CrZFnUqifSWX8k1KQOjO8l4dghqlkVzH8o82I0t:6lSTq9SDnsfP8mGjOG43lszH8Ty","tlshash":"73b37d504801da7ad5b3245424a94840fecf2fe7d12ed275f2fd23699be6c742b2d2e8","first_seen":"2026-06-05T01:40:55.754758Z","last_seen":"2026-06-07T00:27:53.688149Z","times_seen":5,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/LangLabel.vue_vue_type_script_setup_true_lang-B8XDZAHb.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/LangLabel.vue_vue_type_script_setup_true_lang-B8XDZAHb.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://naifei.win/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-188c\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y1Lo7NL6UaquWRTY1P1nhknylrd4UeH8vzFLz3JGZurpbSORqQVMBt13L6fpj5XT3jpQ3%2B1zk5a0AsStnQp%2F2luV3U89MBaRTTvxTSM2MFLn5LoP72p7BeQDsbCC\"}]}\r\ncf-ray: a07b87e9f81d0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6284,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6283)","md5":"cd897f4e493ad6016a0e573dde93d5d9","sha1":"cefcd792b3e21f5dc2fbce77894cc8209a15e22a","sha256":"a498d9617ba85cb3d0b706cb921e0f448ae82313887a0ab2a2897d738ea8f626","sha512":"1c199209b1fb44ad33343ad146259ad986717b43278638369fe54defb5f094e6be0a8bf1d1524c29b1073d38918aa66b02e649eb17269fb5d90c1f45429017af","ssdeep":"96:iYTAPvxQaJ+TBub9QotCMFyCfiM/8ATAPvxQaJ+z+fHNyQC+ORPORtrcqKno0J1b:iYkxQaJoBG9dtDFqjAkxQaJHvvDs1z","tlshash":"95d1f9b9c652de3c792e00cc55a038846ccd6dbf90b86095baf7462df7da07089367e9","first_seen":"2026-06-05T01:40:55.75645Z","last_seen":"2026-06-07T00:27:53.668074Z","times_seen":5,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/BaseUserTab.vue_vue_type_style_index_0_lang-7GyIN_XH.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-7GyIN_XH.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://naifei.win/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a1c09aa-2dc\"\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGSuZjNWlYId3D%2FwiyGOjUGq3ulj%2BHBPpMvWWoaqN5YKiFdchyqSFXLX73wcEIs2%2FFWfzENMF6Sr4zu14AggjbgXy0vP4JmlosmCwPUg5ciqCGC7s9VDJF5YUf2g\"}]}\r\nage: 34744\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b87ea18230b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":732,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (457)","md5":"29d3c280537508181893fcd2dc9e3bd1","sha1":"84a0a4f49f096f629bf47eb80e3ff00f13dd33f1","sha256":"ca0947c61b0065f70599f91d36ae026f381b263a0071620b2730d3c91dd29a77","sha512":"9cde8d5b50c9081059d930acdd46fc400584e8661ea924330d989ec8a0a1f4c7b1d22635a0ce9d50741528b801833cfe6faed544e9ed2bb49e2a6a6ead1cdc9e","ssdeep":"","tlshash":"8b01d0cc9ce9cbb9d09605502ac6106890915f58a328c89170586d21534fca0e7cd33c","first_seen":"2026-06-05T01:40:55.722797Z","last_seen":"2026-06-07T00:27:53.703166Z","times_seen":5,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/index-DyjyQnb2.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:22.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/index-DyjyQnb2.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-140328\"\r\nexpires: Sun, 07 Jun 2026 02:48:18 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u6pnMFkTEcz%2F8wbAEDhQewLtAll2XSygoINVwXQkJZRUY4hE5V67ytV261wKcbZzm6XvWmSLxrfl3v9f57c8Of9hXM4x%2F%2FilqiMM6OPPdGH2tGipJqlGjH9NkImf\"}]}\r\ncf-ray: a07b87d96f6c0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1311528,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6841)","md5":"844eee1ca24008a7cf4044b6a0ace7f8","sha1":"228bb85c36d8ec6c6a79cb611bf027795a09e6d3","sha256":"14d942005a56c1296fb0937ff98a294b9a54f072ec7bc50a4fd5cb609f259c91","sha512":"11bd00b2397376710c3334ad81cc939cf38b55f5a5e8934c32040003aea0043cf902635fc20daca55e22032aedd51c548e1a3f03a3e5506cc148c4fc3d2d2b62","ssdeep":"12288:QAoyyS2Zvpm1z0inNBPFba+vaqCtdepVo2n:xoyySmGNNBPYOaDdo","tlshash":"cc2549282a5bf3449419c0dbea373c84c59de18ab40b64e15f7547b31bb2793eaacd13","first_seen":"2026-06-05T01:40:55.734182Z","last_seen":"2026-06-07T00:27:53.703828Z","times_seen":5,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.naifei.win/api/public/init?d=1780792044000","fqdn":"api.naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:24.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"OPTIONS /api/public/init?d=1780792044000 HTTP/1.1\r\nHost: api.naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://naifei.win/\r\nOrigin: https://naifei.win\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jun 2026 00:27:24 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://naifei.win\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JH68kDmkfp0V2n3qwexp7%2F2OuGtUC68MG8WkyhtTY4gJH4ysbAALTU4TFsud9G9nEe87%2BF%2BxN2J43mjfMvwnWDhMuB4jDv%2BtNUiGe%2ByyFhgidGPp2BUgCfUYoQza9gSr2A%3D%3D\"}]}\r\ncf-ray: a07b87e37d47b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T01:14:21.666001Z","times_seen":16283523,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":59,"dns":26,"connect":1,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.naifei.win/api/public/get_lang_json?d=1780792044570\u0026lang=en","fqdn":"api.naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:24.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"OPTIONS /api/public/get_lang_json?d=1780792044570\u0026lang=en HTTP/1.1\r\nHost: api.naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://naifei.win/\r\nOrigin: https://naifei.win\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:24 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://naifei.win\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMg0K%2BGAXzW%2FAortBoYYetUhWVjJbD%2BETOvV9RbjEMVc2O0kZsqleiSGTlgfOiTObRsUK%2BboO8WbN6CI99d4atJQZdYnC4o1gjLvKrEKq%2BuBZFYEC1yq4XE382ks%2F99PZQ%3D%3D\"}]}\r\ncf-ray: a07b87e6a8020b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T01:14:21.666001Z","times_seen":16283523,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/service-BEez6ewO.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/service-BEez6ewO.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://naifei.win/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-54ff\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Lgs63XnWmR6DUfunD9KHEqVq0wHjwjY5sXlGEJJ9EkQS99bAv4YXwgUP7FCgc9H7I0N9Cqy%2Fm5LosvGrdBZ1y%2B5BkWVbSqKg8xL13cFbB1HBp0dC8jvpY2oOS39\"}]}\r\ncf-ray: a07b87ea18200b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21759,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (20411)","md5":"7ece3283f19d1f663621e1e53a87be09","sha1":"69e3a6bf62f474891735b2af6579b9d74cf166f0","sha256":"4801a9a9720092654b4cb96b855cd38dac9d45b360bc76060bf647d93769e953","sha512":"9755dbe6bf35097aa9f93b2f7bf69dba2a8a930b7ec58fceedbb08ec80a7378a9b217df9e42a26ea00a7f7de052e0f6729c28608a2403b85acd7b43c956da527","ssdeep":"384:apPgK5a28wa8H5tc5YUOWoJOy1vUHwmUM36:6PBajwa8ZqyvOcUQmW","tlshash":"4ca2a17b00b007b6fbf19324f101f8a627891e876856a5f38dbf436299910e7b5cb65c","first_seen":"2026-06-05T01:40:55.763982Z","last_seen":"2026-06-07T00:27:53.704558Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/BaseHelpBtn.vue_vue_type_script_setup_true_lang-DeyqDHQW.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/BaseHelpBtn.vue_vue_type_script_setup_true_lang-DeyqDHQW.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://naifei.win/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-69b\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPPgAkjDQNG2upkXF3H8AJmIkOe5KCemFBErQq7J4TSTP3FElYmIGEVBN%2FmztoWnlcWt%2Bi8dQE2XKlPMNjRVGLhbFeqwogm5EV%2FOvR7Z7aH9EjXyNPiTsFvcNYlz\"}]}\r\ncf-ray: a07b87ea18250b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1691,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1690)","md5":"29b54757a0b3ae9fa432d9c4dfd1b003","sha1":"97f4c52500ce6c1d2f1e2f57868aab4735354bdd","sha256":"7a3176f5eff7063498a8cb95681512036750eff86ceda6a9d252bd33fa9cf256","sha512":"ef56549b5ded7e858e6fdc6af72824710b4c882cfafdaab0e9419725a196d5ec86d366f904ba3b5f988b8c4b5ea89c536b71ec61a96313d27d9c5af41a6ee748","ssdeep":"","tlshash":"bc318699b8178bbde2b38d394e02901c91498f4ed526d24531ecc5126bc7c3c6b99b68","first_seen":"2026-06-05T01:40:55.739716Z","last_seen":"2026-06-07T00:27:53.705285Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/index-oh6TOCvk.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/index-oh6TOCvk.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/assets/login-CPIaCRnu.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-b4f\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t0N7L%2F68VPJjpsbqDDz1OiM0GvEvT0VJEnB32ciEBbMvd1617HQdsujlmUCmrEqZY2BFg0ON4HPF2bTQO0eD9O2S3IKqk4YkyrjafAAuMePCqZmSZvBzuv11GD4w\"}]}\r\ncf-ray: a07b87eae8300b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2895,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2894)","md5":"232d22c74a6a630c0f8c54133766b798","sha1":"2fed1c3058b3463cdd1febd2dfcdf47db091e011","sha256":"431966b1350dea1c9bdd07b30c6d39e0988a1193902ed7b94fffbefc6627463b","sha512":"ba217c6266112818248bdd2b724ef6190a2c7c2da1959f3ea86ee88517ca120d1a8e5b086193365bfabda5caee71353f0b3442123d5ac5df1dc274d78dda2079","ssdeep":"","tlshash":"0151946d7dd88a39caff4d8404670912a91f0b18661488f1e4ae6e9c2b3e554b13ff2d","first_seen":"2026-06-05T01:40:55.741639Z","last_seen":"2026-06-07T00:27:53.695872Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/BaseHelpBtn.vue_vue_type_script_setup_true_lang-DeyqDHQW.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/BaseHelpBtn.vue_vue_type_script_setup_true_lang-DeyqDHQW.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/assets/login-CPIaCRnu.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-69b\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CTe41pdLJjMIQATELYrozkmmKjwBDrY2WNRp2Y8lAwRwGP7L5g7CL7bUtU2CIiv6AXZOtA1Oqu%2Fs44absZCXbgxA6aJ%2BExJNantiVhbPa59AlU1GADCNEB7antpI\"}]}\r\ncf-ray: a07b87eb18350b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1691,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1690)","md5":"29b54757a0b3ae9fa432d9c4dfd1b003","sha1":"97f4c52500ce6c1d2f1e2f57868aab4735354bdd","sha256":"7a3176f5eff7063498a8cb95681512036750eff86ceda6a9d252bd33fa9cf256","sha512":"ef56549b5ded7e858e6fdc6af72824710b4c882cfafdaab0e9419725a196d5ec86d366f904ba3b5f988b8c4b5ea89c536b71ec61a96313d27d9c5af41a6ee748","ssdeep":"","tlshash":"bc318699b8178bbde2b38d394e02901c91498f4ed526d24531ecc5126bc7c3c6b99b68","first_seen":"2026-06-05T01:40:55.739716Z","last_seen":"2026-06-07T00:27:53.705285Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:24.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://naifei.win\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 10:07:43 GMT\r\nexpires: Mon, 31 May 2027 10:07:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 569981\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-06-10T00:34:23.769942Z","times_seen":18468,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":206,"dns":1,"connect":16,"send":0,"wait":16,"receive":18,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/default-CTPhApEo.css","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/default-CTPhApEo.css HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 20 Apr 2026 07:50:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e5dad2-1a84\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2FaIUBWTAsWarL2Fo4Q%2BLliYDeiSvDLaGCR2HauCBnjRSjZcHQK6BeHlXof2zqocEX3qNFHRccVeeLt4L2DeC8Xz78ob8YWexm%2BHkrjy1FGIPsZRwLrYHpYYcwpT\"}]}\r\ncf-ray: a07b87e9d8150b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6788,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6787)","md5":"5614f693974ff4d3326fe1a49c14a0b4","sha1":"fef58a53d9b9c50786dcf438758d747a04baa6e8","sha256":"3231d6fc584ef9fcdce66855be93db2cdddc52075d86da2c651118cb3071b185","sha512":"48524015634247ec11a9ba3f1f6fe5b8cd6dd8e04f621778d5e1b36c6b8afd81b57c121f8e687dba2e09213038a9cff9eb38d414c4cf863a8257282bc69e02b6","ssdeep":"96:kVHCTmkGb8O+drVG1mh19/zmEVAAAMh4WJwyksVuVw:kVHCTXGb8O+9VGgDFKEbhbwyksVuVw","tlshash":"22e1af141434732a9a77b1b76aff114c4834e652da636b4ef353750059dbb932132bcb","first_seen":"2026-02-22T05:37:29.316643Z","last_seen":"2026-06-08T09:25:51.128577Z","times_seen":28,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/index-BS17_dpn.css","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/index-BS17_dpn.css HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 20 Apr 2026 07:50:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69e5dad2-8ed\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YtivQm7xOfvBTpXXkP2qm70LnMw1unu%2FslBvDV%2FP%2B0fqaW1CWms1lXnt5M513oZf%2B6lbdsmFnaUdpWYjM9UOvKmsX9JIKJDscDGltPyV6cGdPaA%2B%2BMT9nu2yP1vd\"}]}\r\ncf-ray: a07b87e9f8180b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2285,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2284)","md5":"1d05703cce897c29046715d007d74f1e","sha1":"53d486c3551997abe790771033ef1eb46057fa39","sha256":"e65540440b381d92458aff168ed8c0983537fca5b685f13755aa4aeb5f2b3902","sha512":"7548561c6089f474e0451bd1227ec62095e17b54287c4b544df0bc1e460744eab1615d25abfd76b778dd202e627f4bcc722e5467e858d4ee0dbcc305cd1dda54","ssdeep":"","tlshash":"7a41d467daa045faae33a5950f5585cab13ce9208e00df72b580d11c8dcf6f626136ec","first_seen":"2025-04-22T04:55:21.194396Z","last_seen":"2026-06-09T09:38:27.78814Z","times_seen":61,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/service-BEez6ewO.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/service-BEez6ewO.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/assets/login-CPIaCRnu.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-54ff\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wgDaEAtNhcbRyzeaiUkG40ZlAtgLGs9ZNpi1A2dmJhr9jCJrG824LaKP85fYHn7WkxriFoJQRfztee7NnfOIZNwaf7%2Fhhyh0GmK8K20ow5d94LYCkaBKCCjRtBMD\"}]}\r\ncf-ray: a07b87eae82e0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21759,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (20411)","md5":"7ece3283f19d1f663621e1e53a87be09","sha1":"69e3a6bf62f474891735b2af6579b9d74cf166f0","sha256":"4801a9a9720092654b4cb96b855cd38dac9d45b360bc76060bf647d93769e953","sha512":"9755dbe6bf35097aa9f93b2f7bf69dba2a8a930b7ec58fceedbb08ec80a7378a9b217df9e42a26ea00a7f7de052e0f6729c28608a2403b85acd7b43c956da527","ssdeep":"384:apPgK5a28wa8H5tc5YUOWoJOy1vUHwmUM36:6PBajwa8ZqyvOcUQmW","tlshash":"4ca2a17b00b007b6fbf19324f101f8a627891e876856a5f38dbf436299910e7b5cb65c","first_seen":"2026-06-05T01:40:55.763982Z","last_seen":"2026-06-07T00:27:53.704558Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.naifei.win/upload/img/6a1c15bd313c.webp","fqdn":"api.naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /upload/img/6a1c15bd313c.webp HTTP/1.1\r\nHost: api.naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 31 May 2026 11:04:29 GMT\r\npriority: u=4,i=?0\r\netag: \"6a1c15bd-8b66\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Km0p7lW%2BOqBNXXfh%2B0dg8ROWgEWm6H6GG2EGZuUeaxs1BaX8Q4Qlyoq9L5jAzq0%2BKiP2Ck1eibLUsa9bldRDSgAD6tVbBQ23oqCSu2LAQbMgchbwlicPYguqSkxdoD5pxg%3D%3D\"}]}\r\ncontent-length: 35686\r\ncf-ray: a07b87eb48360b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35686,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 900x900, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9b764d72cf7e5b8c873395debffeb385","sha1":"2c292c88001d3541bc33b6284a7f89f3dc2bcaee","sha256":"0f7e73d0c08981d58032d561620d0a57e7eb9bae981f0dbb5572459e46f337a8","sha512":"c204c2f40b0af7a86bcee387a17cc25c9cb01cb3afb0b032bf678d873b3fa3479a467774d4392d6c35e0164660e1e6244309121f6c8aa53aca91051668aa6190","ssdeep":"768:cvOHXKsrz7TLydf6yKMsuv5HmGbW282LmzTHF0kvO:OsvPg6yKKD1ovF0kG","tlshash":"93f2f2d6d12a3253997a6b7a803fe5cb3b33ccb66b1a85924a3cc44072463f77c1a591","first_seen":"2026-06-05T01:40:55.737427Z","last_seen":"2026-06-07T00:27:53.70089Z","times_seen":5,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.naifei.win/api/public/get_lang_json?d=1780792044570\u0026lang=en","fqdn":"api.naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:24.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /api/public/get_lang_json?d=1780792044570\u0026lang=en HTTP/1.1\r\nHost: api.naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-lang: en\r\nst-ctime: 1780792044570\r\nst-ttgn: bf1540be85c353662dab934deaf40625\r\nOrigin: https://naifei.win\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:24 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BaswrCrylQrX%2Bldc8tLkS0N%2FSixfzI%2B4fJ9I5RaqScX3q8Da6i33ymgjKi%2FAeaQZz89T2%2BgrwwkwYMvQbJXvzm%2F7i03KltwbRaY6sigzDkBX2xoEieLBi9ZF7PToh6lzXw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://naifei.win\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a07b87e798090b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20449,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1f4aad401be69670d2603f998f320c0c","sha1":"cfd22b2af16d9a1da422c657a90b7fa9ce220d5c","sha256":"4dbb33ac6f268a3a883b27264bfcb13b304ef250768684bf7b7d52339c7a0e0d","sha512":"987b52505b53f31a4a2f4a963f1afa9a6554f82f875745be16c9e64992cc5b0c02ddc896edbdf386bfd74bc09c7f98be0e23459543fee71897462c504f6531d1","ssdeep":"384:lrp+ftVRc+n46sA6sUxUtk7cOoeMZPW99N+Ef6wKGluxcmcM:f0V2+wlcOoZ6Yp","tlshash":"3f92d68926071e739fd38bc1b46b6c0722bd52d712d5884d0cdeca2c615fe59b37b28a","first_seen":"2026-04-13T16:37:43.771665Z","last_seen":"2026-06-07T00:27:53.7082Z","times_seen":9,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naifei.win/assets/login-CPIaCRnu.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/login-CPIaCRnu.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://naifei.win/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-f5f4\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PO0r7dHU4YtG3QByBbVif3m3afE%2FLJpVXV4p0FAqMB1mS8jmjIwDm1ov6BcQvegi8x0nEBsplRu%2FbNwuGNGCrYv4O%2FMJKVisB%2FUZgMemF5v4uGWtXYu5txAoNemu\"}]}\r\ncf-ray: a07b87e9f81f0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62964,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (62963)","md5":"1752dbf0326adede82cb7a6469a4ed30","sha1":"c1d17bd9ec8490de964c6c8507907072c9d6a212","sha256":"2cd401b8502ee2296069635a8d804a4b9c1ab5b6e9191a8cd6ee89611b923ece","sha512":"2b9879d459b6474773e96f16e55e1fe4d7066da4039debf618999e768e860a418e554882db7a5b79958096abef4e0136a877c6077a4d2f1b15fbab500568d2b3","ssdeep":"1536:eqa/iNr3z0WOnLoZN44KDWRtNh7+jTqCUETbykObGAE:eqawDo5n8ZO4SQtr7Ke10GRbC","tlshash":"3853602890b98ffdacbb5115744b8c15e20e5fffc1059a2792fd0a16afa1de097b0358","first_seen":"2026-06-05T01:40:55.74349Z","last_seen":"2026-06-07T00:27:53.696658Z","times_seen":5,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/BaseLogo.vue_vue_type_script_setup_true_lang-B_aCqRcb.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-B_aCqRcb.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/assets/default-CrDw-A8P.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a1c09aa-243\"\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cihNlTzGo3RR3p%2Bibtcvs4M4JtgFexkoKelLzNlRb81yao95tni%2Bzmmzb6KjS318bxrk8WitvFuXi%2Bp29cPoaoDcApaNUqbI0HrdCknWtaxD9LH%2BXaMnmFfygX0R\"}]}\r\nage: 34744\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b87eac82c0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":579,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (578)","md5":"ca3a8c549c4419639229b0b708913bee","sha1":"e66b2b37549f174bc4ba4c71b67c3b32922761a8","sha256":"3f5cbf741c859e27e928c820731c05d1799b608e4b3ee93c17b234e2fc3a4ab4","sha512":"841c8a80055be5de723f3a102bd71c99ba907e0a0dfc95afc24dc3ffabfa9d82ec07d1601dbe31dca97d9faaf3f8ebb4ad15e7416d5fdc11792e6efcd02b66c4","ssdeep":"","tlshash":"8ff0260fac6c81fd91e70414264b508111488f6dc635de40f2f52335a741c5eb45ff38","first_seen":"2026-06-05T01:40:55.750313Z","last_seen":"2026-06-07T00:27:53.685071Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/BaseInput.vue_vue_type_style_index_0_lang-eFZMLn8t.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-eFZMLn8t.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/assets/login-CPIaCRnu.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-93a\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mgRVJosS5CUQSu%2FrtuUFXSwgQmpq1F0q3uJXlueC6oFwvDt9V3V0GR0uIzR5JyCXxSDyDG4Enq1TdPZKSLIhCW99GkxzaAjAgtqym8BU1fymyQlXn9xGesZnUR6z\"}]}\r\ncf-ray: a07b87eae8310b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2362,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2361)","md5":"ba86b432a227b16e879e9a9e0cc7829c","sha1":"7d165b677e82f62263848d2f23be3cd48a167e8d","sha256":"e95a6837a9f4e89362a5cb96d3ea1f8e2b200a4f3c85981cbd57d4ae0d945882","sha512":"2cbe897e2369e5c2eccef99441272246e58eb4386ac5361f12a6f251f371210d5de172e567ae8fa43fcfb3e8f11ef61f8da651e03977b3234fd16f53d8db34c8","ssdeep":"","tlshash":"5c415208e86aaff2d5b3d5a961eb4c30f0152b5bd641891110b94a292f8cee0533ef9c","first_seen":"2026-06-05T01:40:55.72881Z","last_seen":"2026-06-07T00:27:53.709012Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/BaseUserTab.vue_vue_type_style_index_0_lang-7GyIN_XH.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-7GyIN_XH.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/assets/login-CPIaCRnu.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a1c09aa-2dc\"\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JPDzrY5LgdT71Q1rCIMqdjlG1PFozOl92T0UK3nkT62iICXl7x7eYkkA%2BUpyjXHBJmPRMzlMvV%2Btw%2BvVCdbZwG4uIiHLvD2g%2B%2FWrfS6k6M2u4duqiKmXwxcf9UZW\"}]}\r\nage: 34744\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b87eae8320b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":732,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (457)","md5":"29d3c280537508181893fcd2dc9e3bd1","sha1":"84a0a4f49f096f629bf47eb80e3ff00f13dd33f1","sha256":"ca0947c61b0065f70599f91d36ae026f381b263a0071620b2730d3c91dd29a77","sha512":"9cde8d5b50c9081059d930acdd46fc400584e8661ea924330d989ec8a0a1f4c7b1d22635a0ce9d50741528b801833cfe6faed544e9ed2bb49e2a6a6ead1cdc9e","ssdeep":"","tlshash":"8b01d0cc9ce9cbb9d09605502ac6106890915f58a328c89170586d21534fca0e7cd33c","first_seen":"2026-06-05T01:40:55.722797Z","last_seen":"2026-06-07T00:27:53.703166Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/login-bg-D4AlTixt.avif","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/login-bg-D4AlTixt.avif HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/assets/index-BwT3Jl2c.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 28 Nov 2025 08:10:01 GMT\r\npriority: u=4,i=?0\r\netag: \"692958d9-5e75\"\r\naccept-ranges: bytes\r\nage: 4163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4O2WnPmpYV8EBsPvDZ8DHDkXGgPEyBeyc0mQsV8TAeCiVwP5yYx6%2BAy35EreayfyLGupfkZ1Riu6S3%2BxmbylhuQFBp5LA3GDsgTuk4JvPM4NTQkuSUWaYrN4Y4F\"}]}\r\ncontent-length: 24181\r\ncf-ray: a07b87eba8370b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24181,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"70d76998a85f8122fb629dd00bf5149d","sha1":"744b84d57b3a7984eb95491cbfb4bffb418afbd2","sha256":"a3bdf2823c534ea7fed3e42fee5188bd9b0e4fe21683b40aa72cb376ac22cdc6","sha512":"dabece9f428b764c091232cfaa23c01de6811eed226f4c5b499134879f227cc0b2f7d1b0113f001705d41b101803d1b9822d94f272d96239b9e019286c0652ac","ssdeep":"384:rIQuo7jex1YJLRuNKfBAJuO4PsocxXk+1l0QAm2pyaXGNlKXfoLyAOFMhDlxA38s:r3ex1YJ1qmjsZXraQAm4ya+lKvyjWMhq","tlshash":"eab2e03d5147ec96e56f2631cc5e2a20c610a2fed3985c9f1bac4b8cfe713c8e4656a0","first_seen":"2026-01-28T03:35:34.288806Z","last_seen":"2026-06-07T00:27:53.709716Z","times_seen":7,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/BaseInput-QBaNTw53.css","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/BaseInput-QBaNTw53.css HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naifei.win/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Nov 2025 08:10:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692958d9-5b6\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=82Qc0YfYhHVKFalWaEh8loI3e3BWwvg58YzhHED7raM1G%2F3fMELQtBVK%2F13S8gSK813ZbBIf4ZZk%2FZ7ddqdqqLcuCR6BQEc1468TYVmLUMtfYtwhmYkBb22IwSbo\"}]}\r\ncf-ray: a07b87e9f8190b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1462,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1461)","md5":"4fa5644ea4fc009d0f445cf73c8bd5e4","sha1":"78698d99e34fba61acf45776d2372b6e7652f36a","sha256":"71f88b96fcf04dec8e9f6889d5ee36170d109d0c421fdb2d87f6a0dfa267d5ee","sha512":"ad9db746cff222ab05c6d73ebf59bb76732bfbdbdfdde55690833a984cf04a15b71ae4c6ad5975d3a1420346a379637424b6f9fadf021ac928385f952248948a","ssdeep":"","tlshash":"a8315e081d60ef1b2cae6ef3e5c8da872c1855b35fa39d45d140602687958b53f3fe68","first_seen":"2025-05-06T14:23:01.814581Z","last_seen":"2026-06-08T09:25:51.128001Z","times_seen":143,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"naifei.win/assets/BaseInput.vue_vue_type_style_index_0_lang-eFZMLn8t.js","fqdn":"naifei.win","domain":"naifei.win","tld":"win"},"ip":{"addr":"172.67.132.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://naifei.win/","date":"2026-06-07T00:27:25.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naifei.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 09:45:29 GMT","end":"Sat, 29 Aug 2026 10:40:50 GMT"},"fingerprint":{"sha1":"46:E1:AC:AC:89:4A:13:73:9A:83:9B:4E:A6:FA:7A:2A:01:55:0E:92","sha256":"84:C1:5B:AE:A0:25:B7:66:50:F4:2B:BE:A4:E9:F6:1E:44:B9:57:73:08:0B:70:ED:D7:36:61:F8:B1:43:F5:5C"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-eFZMLn8t.js HTTP/1.1\r\nHost: naifei.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://naifei.win/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:27:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 10:12:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1c09aa-93a\"\r\nexpires: Sun, 07 Jun 2026 02:48:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34744\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pruf6%2BkgPxT74T%2F9NcSbyBb1YoFOtDN5ef3A0vVqg0SJDTqeaIatmGrfJ0G2hBl7RjfwJdsRwntqnJ3NGRSEjR6VaD6bK1U1YRoV0aP8xuCXoRArOeJSNZBe25ls\"}]}\r\ncf-ray: a07b87ea18240b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2362,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2361)","md5":"ba86b432a227b16e879e9a9e0cc7829c","sha1":"7d165b677e82f62263848d2f23be3cd48a167e8d","sha256":"e95a6837a9f4e89362a5cb96d3ea1f8e2b200a4f3c85981cbd57d4ae0d945882","sha512":"2cbe897e2369e5c2eccef99441272246e58eb4386ac5361f12a6f251f371210d5de172e567ae8fa43fcfb3e8f11ef61f8da651e03977b3234fd16f53d8db34c8","ssdeep":"","tlshash":"5c415208e86aaff2d5b3d5a961eb4c30f0152b5bd641891110b94a292f8cee0533ef9c","first_seen":"2026-06-05T01:40:55.72881Z","last_seen":"2026-06-07T00:27:53.709012Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"naifei.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"naifei.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}