{"report_id":"1a73a338-3263-4440-aa88-9adfc762dfb7","version":6,"status":"done","tags":[],"date":"2025-08-09T19:44:50Z","url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"title":"OurTeamr"},"submit":{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-13T19:44:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"new-api.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":268380,"first_seen":"2018-07-31T06:41:30Z","last_seen":"2025-08-04T02:00:21.640378Z","alert_count":0,"request_count":3,"received_data":7416,"sent_data":1871,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"camorope-client-a.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":225917,"first_seen":"2018-09-20T04:36:38Z","last_seen":"2025-08-06T13:00:01.18361Z","alert_count":0,"request_count":2,"received_data":992,"sent_data":1323,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-08-06T15:25:40.423241Z","alert_count":0,"request_count":3,"received_data":330371,"sent_data":1534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-06T15:14:12.503348Z","alert_count":0,"request_count":1,"received_data":6149,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"edge-api.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":0,"first_seen":"2022-05-13T18:55:42Z","last_seen":"2025-08-09T09:54:50.549841Z","alert_count":0,"request_count":2,"received_data":2039,"sent_data":1109,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"ooourteam.com","ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2024-11-22","domain_rank":0,"first_seen":"2025-04-27T12:34:41.630258Z","last_seen":"2025-04-27T12:34:41.630258Z","alert_count":136,"request_count":136,"received_data":3443778,"sent_data":80019,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:2.0.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"FlexSlider","description":"FlexSlider is a free jQuery slider plugin.","website":"https://woocommerce.com/flexslider/","common_platform_enumeration":"","icon":"FlexSlider.png","categories":["Widgets"]},{"name":"ECharts","description":"ECharts is an open-source JavaScript visualisation library.","website":"https://echarts.apache.org/","common_platform_enumeration":"","icon":"echarts.png","categories":["JavaScript graphics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"static.meiqia.com","ip":{"addr":"38.175.44.17","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"domain_registered":"2009-01-27","domain_rank":319471,"first_seen":"2016-07-23T03:30:52Z","last_seen":"2025-08-05T04:00:24.05129Z","alert_count":0,"request_count":6,"received_data":1484114,"sent_data":2692,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ooourteam.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-08-03T21:52:32.070577Z","times_seen":14260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"bcd88c50fd50ff213718aca2c35eb661","sha1":"bffa51f6c154e20a51ba9d6e43f5591e74775339","sha256":"f103aa7733712113374e685af718ce898a0717710fe8168a437ff61f986f9f94","sha512":"edd8eb007c497f0c9594f7d3f1912b3052606f3c634740dc5eb6bf8f1a6376ca3f8309c0535cca2bafdc16a21d1bb4d6526e0e40284affdf45addce9e320a8cf","ssdeep":"","tlshash":"74f0dc16b4e30939193370aa0bff8c25f0b1300fa609cd12bb9d8101ef166484a10f1c","size":507,"data":"","first_seen":"2024-09-19T22:50:47.499031Z","last_seen":"2025-08-09T19:45:58.40825Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad07c0c1d660121f97bab7786623518c","sha1":"dbd837ea6e81ddea95291d616f08669be5f4e83c","sha256":"f8caf20b111009039c5ebca422616a7f00e46d72a792974b4aab37739f935fdd","sha512":"a22131714055511a7f690fd0bc6645874b8428222968d1298dff29dc195ffa92bdcd829479e248678e28d50dd42fa30a328803cb466c4373e9dc5c07191119f6","ssdeep":"","tlshash":"65512e84f7ac0f696231b66c57bf35b91a39276254448858f13d20b0738f60f3537ac9","size":2556,"data":"","first_seen":"2024-12-24T17:17:56.726953Z","last_seen":"2025-08-09T19:45:58.413127Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"ec8626dc4a20de98f7adfcde2c5b4fc4","sha1":"7b5e278224443f220de48254bf8f61880b71810f","sha256":"ccdcf8dd3f491f1cd7f3bc67a41a0310724b98d6279ea681e0eb3e2de5fc686a","sha512":"23cc323c7cd2681af998e815bc46807b05bc85cece4dae58a7bb48fab61661859f44c40ad4bedeba8be45869e3dd759794fe09e15f6913c081036722cee25a6c","ssdeep":"","tlshash":"c9710080c8000c00808000b82c82003020202020c00080000800808022080028a0080a","size":3635,"data":"","first_seen":"2025-04-27T12:34:58.537937Z","last_seen":"2025-08-09T19:45:58.409771Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e442a6d784428c42e4d281995401773","sha1":"d6474af947a1645423b4cc97bc1d66c40cf180e2","sha256":"cb9cfdbd727059ece21c70831dc2794f0fa0621170f663ec65bf5b33bb7aff63","sha512":"790437cc3aea4740ff51005c926b74c091a145439155867ed7279ac8fd80e6545d9dd8ab92da48173add7e85765cce53f8059f80b9b17247e5cfad58c4c0d919","ssdeep":"384:yE5KCvKU9+wlSEfuEXOEpOw3+UhawGQGUVGAtealIAP2GPqUFmU/sAtQanuUi4i:yE5T/NdJbPrFf1VtBzpXtI1","tlshash":"edb2176cf99324593ca334259faf154038e47647cb49d4193aacacc26f4820da5bbfde","size":24765,"data":"","first_seen":"2025-04-27T12:34:58.525255Z","last_seen":"2025-08-09T19:45:58.41375Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"590cc2f6117df7b8f3b47ab865294c1d","sha1":"558eca1134370c53a9a74f79e84258872521893a","sha256":"6621ecf7bcb87ced97cb13e4aed4cd1e990a61edb0a31ea501f6a3170c4f6424","sha512":"c01260038c9c603625b924bcf5c6717ba696d5c7648b04edac5917e8adfc2f8319fb590b9021e8d0708c9e3842af77521d0199cf3aa39543155a5c6d0f793ce1","ssdeep":"","tlshash":"6b11f2f8f85b20da7cd324149baf015134e43647cb09d00936aea8822f8810da5b7bde","size":872,"data":"","first_seen":"2024-12-24T17:17:56.728956Z","last_seen":"2026-06-01T14:39:11.952734Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"134d8974004180564c45b5d31aaff53a","sha1":"e782700779d55c71753c2e83c737ddd75f1feb5b","sha256":"7eb458cf2afde95d64f8b19b0014547281d79481c92b2667bc041f162f5a0c11","sha512":"799181c95fac4e87f19caf98012e6b512fd4e030df64355515923e9c06816d1130fd810a1a94ae3ee6c981f848c495c2132bbe97fce0788aaad8ac8fc4a7fa3d","ssdeep":"","tlshash":"5311d469b49310583d5334158faf164034e4b647cb45d4043aaca8826f5860ea5b6ede","size":936,"data":"","first_seen":"2024-12-24T17:17:56.732307Z","last_seen":"2026-06-01T14:39:11.953307Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"72be916aec41d30e92b0ac12e5eabf2f","sha1":"2b29ebc300178cf357331cffdbeaa4219226c495","sha256":"1f1a582f830cd40e136506199d7a137e2c0ad98f4ec2c8e45f40ab3f21dfd82c","sha512":"fd83d9af00ab9ea002a406287d9344b1cb2494312d562b34a9cb8376b53b1d7652c29c0c3d48efb3738b87bb506d04de565b4b47cdd64f10359774db9271055a","ssdeep":"","tlshash":"2311d859b45310593c5328118fbf01a038dc3547cf69e80676acac822f6812d65beade","size":956,"data":"","first_seen":"2024-12-24T17:17:56.73644Z","last_seen":"2026-06-01T14:39:11.953998Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"272cb0c63341406d6b730b621069803d","sha1":"ab08813ab3dc0339412b17650084ffff8d032bb6","sha256":"1918487f1927b886ff120217f9405aa320a79e04e1fd9adb4efb3bcba17a10cb","sha512":"b1d9be8134a864d7fa7d4b78c0eec3894e1c108d32c154f4418d0470c2f97ebe1885bbb652825c08d9a6f82b76940f55bf0d7635e467977918ebc4dbe295b3e3","ssdeep":"","tlshash":"417100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":3621,"data":"","first_seen":"2025-04-27T12:34:58.536108Z","last_seen":"2025-08-09T19:45:58.412474Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"272cb0c63341406d6b730b621069803d","sha1":"ab08813ab3dc0339412b17650084ffff8d032bb6","sha256":"1918487f1927b886ff120217f9405aa320a79e04e1fd9adb4efb3bcba17a10cb","sha512":"b1d9be8134a864d7fa7d4b78c0eec3894e1c108d32c154f4418d0470c2f97ebe1885bbb652825c08d9a6f82b76940f55bf0d7635e467977918ebc4dbe295b3e3","ssdeep":"","tlshash":"417100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":3621,"data":"","first_seen":"2025-04-27T12:34:58.536108Z","last_seen":"2025-08-09T19:45:58.412474Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"f2f08fd457c4a3daa4fbd2b23a4c24c4","sha1":"a1de82dd1d2b2cc90f66ca3fa140af5e9edbaa98","sha256":"453956ca61871373daf73941495fdd43b4af5e0f0489950498fcae4c498099b0","sha512":"00e629c8dc30dd5836e3f563db44c9f77d3f3b4e5a1a98d0a33517a99f7aa5a4fcc48d87503473544d12bcbdf6145d987cf933b863a74bfd034a9ff2b53f280a","ssdeep":"","tlshash":"39710080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":3619,"data":"","first_seen":"2025-04-27T12:34:58.530217Z","last_seen":"2025-08-09T19:45:58.411819Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"214bc8b510c66415596fdeb505d175e7","sha1":"7dc961df74067fd736cb6e4c7788777deb3733ba","sha256":"48bd5da78bdeb4ca4aaea60c4cb04136fdf99934c02466d3cc921d16000febcc","sha512":"65b1ee2724d83da56411cf995b325abe5daabf1806a8128a75b362abb72745d496fd746ac21583349a70789620c7da6436821a9d937fdab3f40a0650d68c0e0c","ssdeep":"","tlshash":"427100a0c0000c00808000382cc8002030288800c20880000800808220080028200c28","size":3641,"data":"","first_seen":"2025-04-27T12:34:58.545912Z","last_seen":"2025-08-09T19:45:58.420386Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Home/static/js/layer/layer.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-08-04T16:10:31.065575Z","times_seen":14216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"9d17d4326cd2fb41f3792fa19e1eb347","sha1":"7a75059c1586522210b6623491b194cea187dab1","sha256":"1d9e2e66e289eb6afd3da7ab20759676bad4c088dd9715fae996a1f620b681fd","sha512":"c4fcd068f786e352e39e3f78cc39acbb553fb03526fe11669669bcdb85dfc717dfe4d7190ff13e02213e4858d25e260b5a3a2f8105df8adf949aca0c5b2aa3fb","ssdeep":"","tlshash":"907100c0c0003c00c0c000fc0cc00000f0300000c0c0c0300c03c0c0c00c003c03cc0c","size":3638,"data":"","first_seen":"2025-04-27T12:34:58.529292Z","last_seen":"2025-08-09T19:45:58.414387Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"df20cee6ac2e09c3f55b1462656da954","sha1":"80d6cdc85fb3ea8c81c1af38a8ab695f1a8e1b9d","sha256":"ad9670df8848db791e26192ba70f2870c632e76c5667c7883af4fad6b432964b","sha512":"335d566848a69a916ff8db764107c65465fb86d62f8365579e95fe43bf5d8e1cea46527f100db5566dd6d63d1a001af8083728478035c20b84449c6ded051f7f","ssdeep":"","tlshash":"2b710080c0800800808200388c80202020220203c000e80888008080880a0038800808","size":3631,"data":"","first_seen":"2025-04-27T12:34:58.532753Z","last_seen":"2025-08-09T19:45:58.415101Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Home/static/js/jquery-2.0.0.min.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e22f82a5194d1f03ecb712baad2df66c","sha1":"6a9afa00acf537cbdede4aea27f01f8ef6ab165d","sha256":"ac1b82725819fba761d03c03a208214a9157bb026cc5e843d43105970407603a","sha512":"141dcfb31585ad569e19e7769d32a5544219fc1a010611337777f093b1c7143cd8de374b1b50484709a7f42fa472561bbb8976510d06f62f2cf34e3426bde0d7","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38NdTuJO1z6/A4TqAub0R4ULvguEhjzXpa97:oNM2Jiz6oAFKP5a98Hrq","tlshash":"f583d6d9b2c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84284,"data":"","first_seen":"2023-03-07T12:26:50Z","last_seen":"2026-08-02T22:23:03.310055Z","times_seen":863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Home/static/js/echarts/echarts.min.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b6514abb0e411dcb332c25de3306f8c","sha1":"fa15bc12002d77ea96202dea9a5b11903ee8c415","sha256":"a28aebd5961c57d2491bab230de0a6c45c0c6fa766ccbad2bc7c6c0d3df7e5e1","sha512":"bfd34e922b6db77218fea3e9921f33eae91e2d1635164752c60f355a42431b903cd2ab3eccf5b7d7495d664d0088c173b91de0bf2ea3b310accc4b70a264de3f","ssdeep":"12288:NSwmn069ftGyWNm6QY2u5KTD3zfsXzFDtdmNbY:Qwmn069ftgNvMD3zUXzFDtdJ","tlshash":"b0e4f9ad7244742642e73174047f150b92362849b50b8698fb6ad8dabcbc58f327bf7c","size":707131,"data":"","first_seen":"2023-08-27T21:18:26Z","last_seen":"2026-05-02T04:45:33.869552Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/js/jquery.flexslider.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"242034cacf5d08f9a4f4df40208f830b","sha1":"56cffde8b9ca0b7e3161714b786651ac2b87a953","sha256":"487639627bd943c11e40764b968904c921e505bb73f0ae5d7367c8c8ff84a526","sha512":"fcbb4ccb030b5d9dbd4c96c44de7387ba9dd4963f14034ddb2a0ae77ef10e08167290d56565afceebd03e68a3d40d3bdceea903490e6bd0c509afa9ef034582c","ssdeep":"768:oILMsh61e6anxUS1cdeAzMuwskDkg9iPFi2PU1SFzuLdu:kynN8P1PU1SFzuLdu","tlshash":"3043ff1a61b2166589a372ae2f5fdc14eaf78343901dc969fddd030cdf4442806b6bf9","size":57384,"data":"","first_seen":"2023-03-07T17:01:43Z","last_seen":"2026-08-04T20:38:14.30024Z","times_seen":828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1d8f167ab5d0db772505d2dcfbe1b22","sha1":"18385f7c4ef25551e09093f06d1e34a8f63e3e88","sha256":"ab7e1a01e49c4718fbe110389de7c0b353e536ff7fe33ed0406959900ea1877b","sha512":"d292fd411d2d17c4dbad73f309dd69da65ee06a2f27f856d52dbbec9d74327007ce4c546c0128bcec677a37e8efd8d2a2a66f2f3eac3bd4d7eabab8186af6fe1","ssdeep":"","tlshash":"6c118468b493245c3cd324159baf258434e67747cb45d4153abcb8c2af4c20da6b7bde","size":953,"data":"","first_seen":"2024-12-24T17:17:56.737498Z","last_seen":"2026-06-01T14:39:11.954567Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"f56f990a9346c780d8c3c40ff3facad1","sha1":"fd796e44307d1e4f9c79d0dda36f19f0615bfbc6","sha256":"e70c73dd5aec8eabeebd96a0b6bd3f12fbcfcb58c8ebde8e85834d251a9b8dc1","sha512":"ac1e4441c2e7485d64d7489d891ae1b276eb8ec72739b8aad1330034f75bf1c6e9a2df2d7426b3a46c82d5dce2ff1c29b9dafef7e51ef0763e060bf9fc4e1f37","ssdeep":"","tlshash":"df11b16cf49328583d5364118bae394038f477478b45d40537edb8822f4820ab5f6a9e","size":963,"data":"","first_seen":"2024-12-24T17:17:56.739953Z","last_seen":"2026-06-01T14:39:11.955252Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"f2f08fd457c4a3daa4fbd2b23a4c24c4","sha1":"a1de82dd1d2b2cc90f66ca3fa140af5e9edbaa98","sha256":"453956ca61871373daf73941495fdd43b4af5e0f0489950498fcae4c498099b0","sha512":"00e629c8dc30dd5836e3f563db44c9f77d3f3b4e5a1a98d0a33517a99f7aa5a4fcc48d87503473544d12bcbdf6145d987cf933b863a74bfd034a9ff2b53f280a","ssdeep":"","tlshash":"39710080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":3619,"data":"","first_seen":"2025-04-27T12:34:58.530217Z","last_seen":"2025-08-09T19:45:58.411819Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.4.197.prod.20250731_156/entrypoint-v1.4.197.prod.20250731_156.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"38.175.44.17","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3b01eb397dfa262c008cc2616a4e074","sha1":"c440a8a74537b314b2e44ec8c0dfdea164e9bd69","sha256":"19ea2e664084de3da23b4c8099bef1ea41ba286f33b39c3b876ff0fd215f237f","sha512":"ef3b40e235fadf18108d39ecb5ddb44425a4ef973dc16b02b3d86c3c49c0f2f475547badeaa9ed3613e4551ef9264f2a74114e1f7da0063bbe9f8d79b807fdb7","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbM3Zh:+llOuU1C+Pjv+1o+9Y+","tlshash":"591408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","size":194420,"data":"","first_seen":"2025-08-01T09:11:03.118782Z","last_seen":"2025-09-25T08:30:32.836954Z","times_seen":383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Home/static/js/jquery-2.0.0.min.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e22f82a5194d1f03ecb712baad2df66c","sha1":"6a9afa00acf537cbdede4aea27f01f8ef6ab165d","sha256":"ac1b82725819fba761d03c03a208214a9157bb026cc5e843d43105970407603a","sha512":"141dcfb31585ad569e19e7769d32a5544219fc1a010611337777f093b1c7143cd8de374b1b50484709a7f42fa472561bbb8976510d06f62f2cf34e3426bde0d7","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38NdTuJO1z6/A4TqAub0R4ULvguEhjzXpa97:oNM2Jiz6oAFKP5a98Hrq","tlshash":"f583d6d9b2c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84284,"data":"","first_seen":"2023-03-07T12:26:50Z","last_seen":"2026-08-02T22:23:03.310055Z","times_seen":863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe84461ac265684cd4e8443a73684daf","sha1":"5c59114051b6d142275570fb4d72f248a1e5b86a","sha256":"70651d0618a2be83cae3596fa3a0cf04d1ac661569c3ff0d826a225c1793c637","sha512":"e74fdb07daba61c2b5f1a489f3e4f8bbf2502982078817687e81f5eacfcc3e00a3f815e54b7f2e6b388644dcfdad9a3910ca0ffc70d79b319a50e65a7f04a892","ssdeep":"","tlshash":"ce11b16cb557106a6c5324119baf114038eab7478f45d40437aca8836f58109f5a6ade","size":935,"data":"","first_seen":"2024-12-24T17:17:56.741028Z","last_seen":"2026-06-01T14:39:11.955786Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7f62e1d9908c256a320ee5fc026eb8f","sha1":"a981fc357123dfd6e71a62a09cf57831da43e428","sha256":"642649706ccd4f644d46432f0d25d54bccfdd0739e14617b74243c5b9003f79d","sha512":"4e66194179da0452e52811796d113af77e70621f052a8a7da49f971e647b0f4a86d6059aa4ce1e7939b38fbbdc897de0710678a922f31b71b50023cd88b62ebb","ssdeep":"","tlshash":"4311d469b553105c7d932411afaf254034e43647cb49d424beaca8923f4810de9beede","size":947,"data":"","first_seen":"2024-12-24T17:17:56.743928Z","last_seen":"2026-06-01T14:39:11.956404Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c3f02f6d67f72b39526de45f99887f5","sha1":"0ce53d46b8f83f30c994e427e89db57d224fa03e","sha256":"9f47123bbfc2f11ad77796f85911e688279150f8dada01c0bd73c7407cffe602","sha512":"d47498ec8cb9ec3bfb3526186702add9a4db2aa968640a460018fe5a806079f094439508000702b8ce435c109c49fecf78356b85f747620fdc547e4bafa1082d","ssdeep":"96:zUH9w/iICyLGH9w/aICy3eH9w/8ICyxDdwH9w/mICy5+HdwH0IyC:zM9w/iICyL29w/aICy3u9w/8ICyxDdIY","tlshash":"eca1e668f893245d7c5328259faf058038e47547cb49d8157abcac826f4820ea5fafde","size":5011,"data":"","first_seen":"2024-12-24T17:17:56.745193Z","last_seen":"2026-06-01T14:39:11.957912Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"bdfad27bd3765852d78f4446ffe1d0eb","sha1":"f19d9da39516327003bea14f4608b191043dc49a","sha256":"e04442e73b8337e260da2e4b3a5a224002347a7b4a3db3d1fd2335d9a9998b85","sha512":"81f278481c66ad99b9a7c6f323d5282969fe948a489ffea146f9434db4156e60da76a269bb190df4359844a1067f69d417cbf224c8a55ce6faf37b74e4b89305","ssdeep":"","tlshash":"4a41d051a3472cd568f3a96f5f1390121c3a24232947c9183f5ed7e08ffae93a164ead","size":2038,"data":"","first_seen":"2025-04-27T12:34:58.541874Z","last_seen":"2025-08-09T19:45:58.423541Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"fbbb012e519b910a02da83ac6d3112da","sha1":"a03af70ac8200203516bb605834e1e3a1a061948","sha256":"b3f004b5887b020f0abc7d1046d655e1b275a9eb354f05212175561521105a47","sha512":"5c76b4a0f8abfa543ae0c28835d8685715b0899a787e39f251d28a06484c9f51a0de7dc1fc258b4891080768550ee830e5b0594bbac8a8e61594d117ce751b80","ssdeep":"","tlshash":"6cf0c96e0a1ed7ff70a80235532aa2ef70cd4baa90076807fe87021716ac118bc01ea1","size":527,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-06-04T15:30:27.669974Z","times_seen":6997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/widget/loader.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"38.175.44.17","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00184f0a93d1f7867cdf782f3df1ab53","sha1":"2116343f5208357e24bbd944b416e92af38cfb3d","sha256":"07b10d9c31fb3e5df8c7dbb2522da941d49be31f596add069f068a3d83823231","sha512":"de2c11603ea9bf00fad76f283ed1d32ef21e247d2127fba060537383e3e61b145cb77eefbe2c055426b4e0c6d19a967b9919d508ddd6e9954c7dbd4f83df1c8b","ssdeep":"192:K04adoyHIogekJElGZQz6cFDZsWBnCK5HWlT6NKSn2QcWByxGmsHZQzq7vE4o7YI:9H1k+BbF9CF4Nua2Nqw4KYZb9ly20W16","tlshash":"ee7240cdb5c2b0814ba36160422fa81bf2775aa4749f99c0a365d1f8bc7994f8077f2d","size":16345,"data":"","first_seen":"2024-05-21T00:26:26Z","last_seen":"2026-07-02T23:24:00.315628Z","times_seen":2631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","size":298,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-08-03T02:44:22.652838Z","times_seen":6173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","size":78748,"data":"","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-08-03T08:59:17.614854Z","times_seen":7958,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec0edc891b49e6a2b7d8602810771c34","sha1":"9015484bea710665203fe785ca061e949418a889","sha256":"f725c37eed51e33e21a4977a8f314e1c6fd57b98df06a8297ecdf15acdd318b0","sha512":"0b147938f0e64db1b9a45aee1b619fb97f7e024713254a14f968f4ea2afa84577e55d858ff6639a79526850fcf06c38dcd27114f09e44ea9ce658e715d4e5466","ssdeep":"","tlshash":"da5194ded72f057d484663fced7e7adc012e1eb42832cc729ffd561988289398108a65","size":2785,"data":"","first_seen":"2024-12-24T17:17:56.75593Z","last_seen":"2025-08-09T19:45:58.425092Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"074ad6d2a1d944e5e1fadfb66d46f10f","sha1":"40fa8a58cdc37460d18ad88a94d42b3ee8aff6bc","sha256":"72ee0d7dfaa4cdb60b83d85bb7c924c6cb981730e0d8fd948130541e30edec2f","sha512":"a3f98dfb3d682ea551d9f1ed3d95efc620f25af358c79c7fd78ab1776897fba219838c20fd670ea73b98520065624cfc0207b215555843eeeb14a43b1c7ff944","ssdeep":"","tlshash":"b7710080c0000820c008023888800000a0800830c8008800880080a00008203a200e08","size":3628,"data":"","first_seen":"2025-04-27T12:34:58.52738Z","last_seen":"2025-08-09T19:45:58.410477Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"df20cee6ac2e09c3f55b1462656da954","sha1":"80d6cdc85fb3ea8c81c1af38a8ab695f1a8e1b9d","sha256":"ad9670df8848db791e26192ba70f2870c632e76c5667c7883af4fad6b432964b","sha512":"335d566848a69a916ff8db764107c65465fb86d62f8365579e95fe43bf5d8e1cea46527f100db5566dd6d63d1a001af8083728478035c20b84449c6ded051f7f","ssdeep":"","tlshash":"2b710080c0800800808200388c80202020220203c000e80888008080880a0038800808","size":3631,"data":"","first_seen":"2025-04-27T12:34:58.532753Z","last_seen":"2025-08-09T19:45:58.415101Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"f0ed9db077eadec881a62079363356b7","sha1":"123acf200998d93a505796410fb353883213c1c2","sha256":"ad838ac34598fb6b38355d9d4cdec0f7a7293597627f7077c34c2e9d3079d28c","sha512":"b10668198c184e5f931baa6530103dec778848b584c615a1485f19d77df952df4e8a284263954c4dca0f1051763e7a79ea4ca7150df263af44e0795425f0430e","ssdeep":"","tlshash":"56710080c8b00880808000380c80800028200000c800800208028880020a0828020c08","size":3633,"data":"","first_seen":"2025-04-27T12:34:58.539983Z","last_seen":"2025-08-09T19:45:58.422471Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"2625de3e88918aa553cd8a3611c1f1ae","sha1":"99a9763a3fdf51113eec7028e58d2fc03af0112f","sha256":"58973a61d5f061158748d288875950f8599c109de5ba3fcbbdc381d52c3a673e","sha512":"567960fe66cc7f056dfe744282ac909dd4243c4af50beed14700c831458b45b4d29b0730416798a15723af4ba7550dcc1f53ab99710b32af83be40d73c832f99","ssdeep":"","tlshash":"bb7100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":3670,"data":"","first_seen":"2025-04-27T12:34:58.522259Z","last_seen":"2025-08-09T19:45:58.411151Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"f2f08fd457c4a3daa4fbd2b23a4c24c4","sha1":"a1de82dd1d2b2cc90f66ca3fa140af5e9edbaa98","sha256":"453956ca61871373daf73941495fdd43b4af5e0f0489950498fcae4c498099b0","sha512":"00e629c8dc30dd5836e3f563db44c9f77d3f3b4e5a1a98d0a33517a99f7aa5a4fcc48d87503473544d12bcbdf6145d987cf933b863a74bfd034a9ff2b53f280a","ssdeep":"","tlshash":"39710080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":3619,"data":"","first_seen":"2025-04-27T12:34:58.530217Z","last_seen":"2025-08-09T19:45:58.411819Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"f0ed9db077eadec881a62079363356b7","sha1":"123acf200998d93a505796410fb353883213c1c2","sha256":"ad838ac34598fb6b38355d9d4cdec0f7a7293597627f7077c34c2e9d3079d28c","sha512":"b10668198c184e5f931baa6530103dec778848b584c615a1485f19d77df952df4e8a284263954c4dca0f1051763e7a79ea4ca7150df263af44e0795425f0430e","ssdeep":"","tlshash":"56710080c8b00880808000380c80800028200000c800800208028880020a0828020c08","size":3633,"data":"","first_seen":"2025-04-27T12:34:58.539983Z","last_seen":"2025-08-09T19:45:58.422471Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"2625de3e88918aa553cd8a3611c1f1ae","sha1":"99a9763a3fdf51113eec7028e58d2fc03af0112f","sha256":"58973a61d5f061158748d288875950f8599c109de5ba3fcbbdc381d52c3a673e","sha512":"567960fe66cc7f056dfe744282ac909dd4243c4af50beed14700c831458b45b4d29b0730416798a15723af4ba7550dcc1f53ab99710b32af83be40d73c832f99","ssdeep":"","tlshash":"bb7100f0c0000c00c0c0303c0cc0cc0030330c00c000c0300c00f0c0000c033c00cc0c","size":3670,"data":"","first_seen":"2025-04-27T12:34:58.522259Z","last_seen":"2025-08-09T19:45:58.411151Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"272cb0c63341406d6b730b621069803d","sha1":"ab08813ab3dc0339412b17650084ffff8d032bb6","sha256":"1918487f1927b886ff120217f9405aa320a79e04e1fd9adb4efb3bcba17a10cb","sha512":"b1d9be8134a864d7fa7d4b78c0eec3894e1c108d32c154f4418d0470c2f97ebe1885bbb652825c08d9a6f82b76940f55bf0d7635e467977918ebc4dbe295b3e3","ssdeep":"","tlshash":"417100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":3621,"data":"","first_seen":"2025-04-27T12:34:58.536108Z","last_seen":"2025-08-09T19:45:58.412474Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"f2f08fd457c4a3daa4fbd2b23a4c24c4","sha1":"a1de82dd1d2b2cc90f66ca3fa140af5e9edbaa98","sha256":"453956ca61871373daf73941495fdd43b4af5e0f0489950498fcae4c498099b0","sha512":"00e629c8dc30dd5836e3f563db44c9f77d3f3b4e5a1a98d0a33517a99f7aa5a4fcc48d87503473544d12bcbdf6145d987cf933b863a74bfd034a9ff2b53f280a","ssdeep":"","tlshash":"39710080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":3619,"data":"","first_seen":"2025-04-27T12:34:58.530217Z","last_seen":"2025-08-09T19:45:58.411819Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.4.197.prod.20250731_156/app-v1.4.197.prod.20250731_156.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"38.175.44.17","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd4d022a9bbb19bc2a632c147b33e91e","sha1":"63a8e90870fdd308b913493854b462871ba0b173","sha256":"260660a209d726db99557d69fb053c1254100273cf03410bfe772760c3924dcb","sha512":"7dac1dc555d66f92d1fd10ce3a3002ddc764385026c1b6d6feeead5b10c01d83fcb5612c00161254928f3ee53221182add34ff0daba8572f1dba570308a08f35","ssdeep":"12288:D1kPXSDv+nvkAoiIGesNV84rmNLeCMImEH74ZY:ZIXSTwoiIGeCGKmNCC1mEHD","tlshash":"0b4528cd71c2b0a207e361b1403f100bb33a6d69680d9464f665d8e9bdb998e9237f7d","size":1230412,"data":"","first_seen":"2025-08-01T09:11:03.133081Z","last_seen":"2025-09-25T08:30:32.904328Z","times_seen":370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.4.197.prod.20250731_156/893.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"38.175.44.17","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"72c711adf080251c80c79fac21d48971","sha1":"8460ed7d7836055f48d16714f7d132e9ce25a4e3","sha256":"8309b46f75e4d7f6e77a82cce81e76e59d0c5bb863f85729a9f48b7ae09d579b","sha512":"c7e001fbaa8a55c0a728781e1a67fbdbf32ff1089951c96656c5f67749286742a3073c33bb0eccd1088ded0065a1d91581af03df3885eb5b035470bebe96b701","ssdeep":"192:aCde4ambIiV1F/+RARv0973EVnRupG4tCjUldLuh0j/yyKbA3wN4d:ddxbIiV1tZRb8GWdJ3uQwNe","tlshash":"686284a5b4d0b40f2b9710a2503f2505b227bc2cf18e75a4d7e0d5f766fa1ce5026b2b","size":15936,"data":"","first_seen":"2024-11-12T14:18:43.637446Z","last_seen":"2026-06-06T22:09:39.355662Z","times_seen":1649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"ade5521f38d7d76c3b77d0093431d787","sha1":"e5ed8be44c0e5dbfad4dc261ea30bd81b5d370cd","sha256":"7f929be2320d23ae49f5e55e914e6d111ed3964e779cac16d17b8d3f92839966","sha512":"193ad6d794306bae900ae6f79697d77951dfceea2a2e4d6d093d40a1c8d43152c66264e6aaa1f17e4181189ba14e5be5ea9ddab47008ebf3616cdf7ce863c6f7","ssdeep":"","tlshash":"b7e086c79b4d2008587f32da4aab268c006d46738c924d9dbd3d91909da46fd5361f1d","size":340,"data":"","first_seen":"2025-04-27T12:34:58.544702Z","last_seen":"2025-08-09T19:45:58.425836Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"f2f08fd457c4a3daa4fbd2b23a4c24c4","sha1":"a1de82dd1d2b2cc90f66ca3fa140af5e9edbaa98","sha256":"453956ca61871373daf73941495fdd43b4af5e0f0489950498fcae4c498099b0","sha512":"00e629c8dc30dd5836e3f563db44c9f77d3f3b4e5a1a98d0a33517a99f7aa5a4fcc48d87503473544d12bcbdf6145d987cf933b863a74bfd034a9ff2b53f280a","ssdeep":"","tlshash":"39710080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":3619,"data":"","first_seen":"2025-04-27T12:34:58.530217Z","last_seen":"2025-08-09T19:45:58.411819Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"272cb0c63341406d6b730b621069803d","sha1":"ab08813ab3dc0339412b17650084ffff8d032bb6","sha256":"1918487f1927b886ff120217f9405aa320a79e04e1fd9adb4efb3bcba17a10cb","sha512":"b1d9be8134a864d7fa7d4b78c0eec3894e1c108d32c154f4418d0470c2f97ebe1885bbb652825c08d9a6f82b76940f55bf0d7635e467977918ebc4dbe295b3e3","ssdeep":"","tlshash":"417100c0c0000c03f0cc003c0cc0c00030300000f0c0c0300c00f0c0000c0c3c03cc0c","size":3621,"data":"","first_seen":"2025-04-27T12:34:58.536108Z","last_seen":"2025-08-09T19:45:58.412474Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"f2f08fd457c4a3daa4fbd2b23a4c24c4","sha1":"a1de82dd1d2b2cc90f66ca3fa140af5e9edbaa98","sha256":"453956ca61871373daf73941495fdd43b4af5e0f0489950498fcae4c498099b0","sha512":"00e629c8dc30dd5836e3f563db44c9f77d3f3b4e5a1a98d0a33517a99f7aa5a4fcc48d87503473544d12bcbdf6145d987cf933b863a74bfd034a9ff2b53f280a","ssdeep":"","tlshash":"39710080c0000820808000b80c80003020200000c080c020088280c022080028828c08","size":3619,"data":"","first_seen":"2025-04-27T12:34:58.530217Z","last_seen":"2025-08-09T19:45:58.411819Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"domTimer","is_inline":false,"md5":"074ad6d2a1d944e5e1fadfb66d46f10f","sha1":"40fa8a58cdc37460d18ad88a94d42b3ee8aff6bc","sha256":"72ee0d7dfaa4cdb60b83d85bb7c924c6cb981730e0d8fd948130541e30edec2f","sha512":"a3f98dfb3d682ea551d9f1ed3d95efc620f25af358c79c7fd78ab1776897fba219838c20fd670ea73b98520065624cfc0207b215555843eeeb14a43b1c7ff944","ssdeep":"","tlshash":"b7710080c0000820c008023888800000a0800830c8008800880080a00008203a200e08","size":3628,"data":"","first_seen":"2025-04-27T12:34:58.52738Z","last_seen":"2025-08-09T19:45:58.410477Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ooourteam.com/xm/BTC.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/BTC.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Nov 2022 15:52:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6363e3aa-a83\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-04T06:18:34.284864Z","times_seen":25747,"resource_available":false,"data":null}},"time_used":1056,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1056,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/create3.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/create3.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jun 2023 16:32:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6493262d-20be\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8382,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"eaee3d94f67957ba28b980386299f9c6","sha1":"a677a72b2648c4d71740090830f90bb5333b5711","sha256":"afd3e84bb4d3850240a4b9007e0db97fbac41060774fda1374a32f2334b430a1","sha512":"4a9c52ea90f898e75b0d9bf6b9e32e16be3c0932186f8c71ef1c26a2b64e62ad6a579cd3669153e6167f0fd0e401c12c52d72ac669c64790744481a2e86c41ae","ssdeep":"192:F5TOMlqLjNFT9boKR/HZTUT/6PxEv86sd9Y9JQoYT1gsH1E1Qm72:FgXjNFT9bt5TeQxEv7L9KZBgsHy+","tlshash":"d002ae2d8e1cfc044cc7aa76d213368ddb4f19169e039a6bc88a89a58b25d51859a380","first_seen":"2025-04-27T12:34:58.474733Z","last_seen":"2025-08-09T19:45:58.341076Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1013,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1013,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=btcusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=btcusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:43 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3559,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"aa428504d06d1341ae9c2e2066964fca","sha1":"5fa31d2a362868942d4a67f5024c0e81114e3c76","sha256":"5ba335e51f531d9ea8e298857807a3770d6b1a1e4c4d862d0f3a5bf12661d432","sha512":"8f8681c4f328ce845c2b534a0a768f687d11bf4b6b313d9dca226ddb5f2a3582e59e9ea15fde17858e7a65115eca000d78f169be1d026149c130a87400f65dbe","ssdeep":"","tlshash":"8771687d82fc7a55181c1805194977e9d98f08e30f9f39fe79a275c1da2013baea482e","first_seen":"2025-08-09T19:44:58.499051Z","last_seen":"2025-08-09T19:45:58.260023Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4022,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4022,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_ada","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_ada HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"71b4c1aa311ebeb86cdad850a5a9e97f","sha1":"ac0622287ace2b0a691e2b1d7b5981d9814e0d0b","sha256":"dcabac0e38d84598358adf083b42ebcdd1fbee3e16807263d551a5a87e542917","sha512":"da2e99558a05d42b5d694a49b2a518abe4063f0fd46e38da0e4666d7b8fe90da024e534518d879fc0909659fec04801230cbce4c62980445cec22fce394f09ec","ssdeep":"","tlshash":"bcd02bd57e35001104f37bd1b8fd272984ad84028082020543becf217558609b142c12","first_seen":"2025-08-09T19:44:58.502098Z","last_seen":"2025-08-09T19:45:15.595732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5972,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5972,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_aave","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_aave HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":258,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ea5796f5f31b9aee83ddec00812cf024","sha1":"71b7ffe52b89acbe450a3539801465fce10ca1af","sha256":"3ba37f3b99263b38fe223d6086d4432aaa7ce671a69dbca8d16ef04df7938179","sha512":"26cb2bf83ea5299f0dd4bba6e3d2355f32d4037e65301ff8b74df5254785a0047ffdb08c6fda1b586d6c7bf158db2275262a06040acc0baa35ee7217817c01fc","ssdeep":"","tlshash":"c1d02be46f36881a16b19fd278e56276689c40808089420556beca663d6810d3105806","first_seen":"2025-08-09T19:44:58.504831Z","last_seen":"2025-08-09T19:44:58.504831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3936,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/CHZ.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/CHZ.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Nov 2022 15:52:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6363e3aa-13f5\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5109,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"2b457b22e9dd64aff296943ce340e39b","sha1":"1a6df942d2444ffe89314234db270f625e99b04c","sha256":"5cb03d2a32e3eb095ff58017138d1dd83cbb535bc62800c4fc9079bc4a5eaf28","sha512":"8043dea1d186d07a7d18aaae7ecf65d4f1731f14a85e7a96efe9fe67969b9154cd978a175274f475a1882f031a45a5ec36b1cbd9273c15bcd49b6c627990b205","ssdeep":"96:rKMGADzM6KSkXoJi+qQFxda8WP2mdVyHTkR6I9RapHhQe52sg:3GADA6hkXJ+qgxdIxjyHQM0apHKe6","tlshash":"6eb17d7f1860523e53680e3112c187e411e20c937e984b568cb19a1867bff5c17f49fb","first_seen":"2023-06-03T12:58:34Z","last_seen":"2026-07-28T19:23:40.863696Z","times_seen":330,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1045,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/shib.jpg","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/shib.jpg HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 09 Jan 2025 01:48:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677f2af8-29dc\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10716,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 225x225, components 3","md5":"bd3fb8fd143e4c42d642b3e5e689a734","sha1":"7aafaf79c215166465228e145695e129dc009ca9","sha256":"448c8a52bf7b80b7270d4cfc3dce90f2ac92df378528e1afd6910b24d8406a08","sha512":"357656843ea5a1562f9515e55bd2984b1a8a416afba4128c1e2c929e54018fdf7633ade7fcf774dd91705dbc20a7dd36479229df6212f6e96235ed97613e7622","ssdeep":"192:I+eGhBGLOCLwKP7a7zMQvOpwp2+amOjHcwlG3vIZVq41W7KxOXzaZ:IRG7GLxLjPwzMQUs25cwsfIZV5DOjaZ","tlshash":"1422ae95e0ab0fc7ffb292f440d94217e2aab6421f6190a1c8147bf452922a6df28607","first_seen":"2025-04-27T12:34:58.445743Z","last_seen":"2025-08-09T19:45:58.331094Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1044,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1044,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.bundle.min.js HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-1339c\"\r\nexpires: Sun, 10 Aug 2025 07:39:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78748,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"8831aa095cdec88f66c2e46c339cf352","sha1":"5db4c40dbc6bd3d9623ee98a2061dd265885cf2e","sha256":"79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9","sha512":"b07f093e128951e03d3d693778e70e97c53e95f65382d0570f8d6ae9c3bfb25c311870b129c5b8e4ae283c25211c6ecd301e266ca11d75598fb935eda5b09b14","ssdeep":"1536:GaPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkS:4OANBZVV5","tlshash":"0f73c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","first_seen":"2023-03-07T01:34:42Z","last_seen":"2026-08-03T08:59:17.614854Z","times_seen":7958,"resource_available":true,"data":null}},"time_used":1006,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1006,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=xrpusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=xrpusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:46 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3437,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"2d4a07b2ee24514e953a88c91510d489","sha1":"fe73c5ea6f34beea568ba853d86ef5e22b2e5f35","sha256":"0df0a31c892af94dc1101094bd7453f3b6fa10cf3e10994b3a4e8a1aad9f5d17","sha512":"70f4de4b75eb37c4ec6c7639841211f3be51d4f124b9b459ccd462a33171b2c229bb2ba2cf18eec64d43570cfcefe4b910671623f68c270088b96162604da342","ssdeep":"","tlshash":"8061777d02f839d1251c294109992bead57fa9e76b2f34fd396674c0ef601ba9c8084f","first_seen":"2025-08-09T19:44:58.512562Z","last_seen":"2025-08-09T19:45:58.391808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7878,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_fil","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_fil HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":246,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1e63d0f4d91df1bbb16cbd42e617698c","sha1":"4f10987d1851a5ee72b40cae4f9f14449670dc23","sha256":"b192c840282ee1d7ab45f3cdff4b80cd104610cb10418646ad37f405f1e5e13f","sha512":"b4a82db5767ae87ae8bbdd94f1eeecb5ff57601c90a9ff342a6bb6fde8554ccabd4da609ea1b97f34f73096f23ac1306fc8140c4caac3cbef88bbbb82cc21344","ssdeep":"","tlshash":"b1d02ef0ae34021c002293d268fb2a6e287c8048c44202068eeecaa7216820e700ac23","first_seen":"2025-08-09T19:44:58.515314Z","last_seen":"2025-08-09T19:45:15.693152Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9928,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9928,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_btc","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:44.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_btc HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4779d8de1236065e5de1c8b3ff8398b9","sha1":"a73f33f376807b7f7428d5711d49ff49d8613bbf","sha256":"61b669f0cc8311df16a033dbb5e73ca3670014fd07fbbac13138d352374a9bda","sha512":"e3d91a9940c7173c05830ab687af52297ed0dbe581c209e5ccd5b416abae329ff4cbe6470bd2dafa93147adef1555e349a5ff992b5e87bde48a7c5bfde864714","ssdeep":"","tlshash":"d1d02ee0bb38883a0cf2a3e1a4e5135b8c4d0481c1c403083abd8fb860bc23c2323c21","first_seen":"2025-08-09T19:44:58.517812Z","last_seen":"2025-08-09T19:44:58.517812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5860,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5860,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtanlsdsd","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:47.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtanlsdsd HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":252,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"910bdd503c0d816564225ab8b33d1ede","sha1":"9b767069af30046d6c58558ea734c91c9bc148c3","sha256":"b066bb80da0b30a0e0715fdfecaff404f9f4625f2f845cf2fb2edddf41b0344b","sha512":"f01fd05378a83fad4174b37e326dc1c28528c8f631a782228e7c1265621263755cc23db02cc32751cd61212b3341f5cec37e632b4f763108905269808b44e50d","ssdeep":"","tlshash":"7ad097f03e39482c01331be338f8233e28bc8041c0808205a3fecf2425da80cf12ac22","first_seen":"2025-08-09T19:44:58.520015Z","last_seen":"2025-08-09T19:45:15.563401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4974,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4974,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/act4.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/act4.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Feb 2024 07:38:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d30590-24970\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 856 x 400, 8-bit/color RGBA, non-interlaced","md5":"1c2c33fb9c4774fa66a568475cf33745","sha1":"8c129a20ef6a7ae435f093fe4819d7b5b66a7589","sha256":"9434d11a7906f04b456de3a6539111d928ba1a635ed46188b32ce086fe33852c","sha512":"bd755c89aab271d7700213a3df809d11bdeaa75c3a12c73eb879d572b1145d6d26228bd93ade90d68335639dfb1ecb2a25a748efc46ed93d51aeec2906c254e7","ssdeep":"3072:amNuqzx8ZHHHAguVtz5ow/zijXPu9MVdlayTFM/XDk2wuNKkKO:auGH5Ut9ooqXPjd0V7ZwuNtn","tlshash":"dce3129c4aa9f8ba79c92c842374ed0d129f64b34937b5c6f8cd5f09810732b9b19637","first_seen":"2025-04-27T12:34:58.44055Z","last_seen":"2025-08-09T19:45:58.390133Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1059,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/arrowR.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/arrowR.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 457\r\nlast-modified: Wed, 21 Jun 2023 16:34:54 GMT\r\netag: \"649326ae-1c9\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":457,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 26, 8-bit/color RGBA, non-interlaced","md5":"3b7090e1d3b8280478c74810509f76e1","sha1":"8d723ddb728b15232c9a41f44b89aa2cb3474435","sha256":"c128fe174f22cb51f0ca08307a2cdc22e733cde1b749d46a11de577fef37a943","sha512":"2a4f38a5899864fd06d7da200659aab4ef48e279d840ea878a5894ca0b6c645a37d044be02f2a179a49e7d7cab5ee5a1de6c52450f23b343cda6454fc868871e","ssdeep":"","tlshash":"18f02bd5554f047dd04bd45f4934001e5edb195e45573f0b3c1214f4601c54065ff757","first_seen":"2024-12-24T17:17:56.683841Z","last_seen":"2025-08-09T19:45:58.366172Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1025,"receive":1773,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/widget/loader.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"38.175.44.17","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /widget/loader.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 19:39:40 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: AliyunOSS\r\nVary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-oss-request-id: 66B5D39E485C4FCD1E9501FF\r\nAccept-Ranges: bytes\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14476346677076018366\r\nx-oss-storage-class: Standard\r\nContent-MD5: ABhPCpPR94Z833gvPfGrUw==\r\nx-oss-server-time: 2\r\nContent-Encoding: gzip\r\nX-Ser: i28857_c3473, i2435101_c27847, i1940273_c22701, i1979031_c23797\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET\r\nContent-Disposition: inline\r\nAli-Tproxy-Dns-Update: sync\r\nStrict-Transport-Security: max-age=5184000;includeSubdomains\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":16345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16344), with no line terminators","md5":"00184f0a93d1f7867cdf782f3df1ab53","sha1":"2116343f5208357e24bbd944b416e92af38cfb3d","sha256":"07b10d9c31fb3e5df8c7dbb2522da941d49be31f596add069f068a3d83823231","sha512":"de2c11603ea9bf00fad76f283ed1d32ef21e247d2127fba060537383e3e61b145cb77eefbe2c055426b4e0c6d19a967b9919d508ddd6e9954c7dbd4f83df1c8b","ssdeep":"192:K04adoyHIogekJElGZQz6cFDZsWBnCK5HWlT6NKSn2QcWByxGmsHZQzq7vE4o7YI:9H1k+BbF9CF4Nua2Nqw4KYZb9ly20W16","tlshash":"ee7240cdb5c2b0814ba36160422fa81bf2775aa4749f99c0a365d1f8bc7994f8077f2d","first_seen":"2024-05-21T00:26:26Z","last_seen":"2026-07-02T23:24:00.315628Z","times_seen":2631,"resource_available":true,"data":null}},"time_used":872,"timings":{"blocked":421,"dns":334,"connect":27,"send":0,"wait":30,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=shibusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=shibusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:43 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3592,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"d0d0c19e49da4879d942c9e33e96c96e","sha1":"a51d27ea23c12d2242ea83cd211bbc5cc2aa2554","sha256":"de4c8d2f7dd73cee0a64649d98702ae7e6fd6b4584ca86bbdbfde3de2a9e8406","sha512":"9990056a2b1eff79930c67da2aec5a4d10f15c70b2cdc71cce3aa4b0d0152f43b32f7e399c65f4c1476e5e59023b06b149f624c72cd6249d8feddc2f2a10dd78","ssdeep":"","tlshash":"7471143a12fb7586010dd015193876abf89fa8f32f0b20fd74a675c6da34832cd9561e","first_seen":"2025-08-09T19:44:58.525745Z","last_seen":"2025-08-09T19:45:58.381845Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3999,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3999,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_bch","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_bch HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":247,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7ab48d240257eb3515e5e923321ca106","sha1":"8e25c245c563d06df57d80503eba0d92f7ef53e2","sha256":"202cb5611f142b49a554f80804444cf7a733c31517f2bed3ae1980449a9c1059","sha512":"de31a2cd7d513da4c1d3a643b5c818a478158e0598a2039226e5bc7bcc318e125c80df9b4d945cd99be18e9f1f606c320a20601b8b56e183d6942df115051400","ssdeep":"","tlshash":"d0d095f11f344c05507153e3f0f537bd14cc45c1c2404100e66ec7213d9c014711bc06","first_seen":"2025-08-09T19:44:58.527322Z","last_seen":"2025-08-09T19:45:15.645007Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5984,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_ltc","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_ltc HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":247,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"797339c2ffce5df344d640d9bd1242e0","sha1":"d9b66daae19c3abff751987591b09995a5d4a8ee","sha256":"8e354e8322ed9ee6be65a8c89c9e3332f94b44b4605d8e1f0c9e4a34d45ea9bf","sha512":"24585401f6a12c33c9f5e71110f618afdc42266ce8f607fbf546e7f6e17e3cfc44e476defc9d8bb60c9909b080a73cfe96e4625d7b6042e08dea7728d96fac4e","ssdeep":"","tlshash":"5cd0a7f07f3849360563abc1e8f92bea584c9951a485835597adcbe229b8708b155c23","first_seen":"2025-08-09T19:44:58.529312Z","last_seen":"2025-08-09T19:45:15.57918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9930,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9930,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_bch","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:49.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_bch HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":247,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7ab48d240257eb3515e5e923321ca106","sha1":"8e25c245c563d06df57d80503eba0d92f7ef53e2","sha256":"202cb5611f142b49a554f80804444cf7a733c31517f2bed3ae1980449a9c1059","sha512":"de31a2cd7d513da4c1d3a643b5c818a478158e0598a2039226e5bc7bcc318e125c80df9b4d945cd99be18e9f1f606c320a20601b8b56e183d6942df115051400","ssdeep":"","tlshash":"d0d095f11f344c05507153e3f0f537bd14cc45c1c2404100e66ec7213d9c014711bc06","first_seen":"2025-08-09T19:44:58.527322Z","last_seen":"2025-08-09T19:45:15.645007Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_etc","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_etc HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":248,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"94f0d9e9afa3d2c2e1b2384e1347adec","sha1":"35bd5d5c62cb30d51ba75dc6d9e4aaafdd124919","sha256":"6b75026c77b3bb2473052fbf0a5ca4df7f3fcd64ffc57ccf39364b194ba4413d","sha512":"14c37eb2579475820c1f0b4ddae394cfd7ac3d048401266fca5c01368dff13902e3768341e94fa3aef06b879cbbf87fbbf643411bac44727ec072d09bdae4de4","ssdeep":"","tlshash":"41d05efcae78492508a1a7d1a4f91a6e288c8186c0d646c59bfece7269685097126c12","first_seen":"2025-08-09T19:44:58.531173Z","last_seen":"2025-08-09T19:45:15.605777Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5979,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5979,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_trx","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_trx HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":254,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9623f820eb84dec376020d53b253f16e","sha1":"b72cadd88df07259fc027caa76fa629618efbc8f","sha256":"bfb56afbf8d5f2755c147009d113b49f4d9f53fc40c80407b16d543b01f52145","sha512":"8ad764a3bfd64a6cd9b7633a255e26497f4474fd81f45fadc2ca9728fcbfe68c8813ef1fcfee55a43449e15b74e05f2a2f27a83468ca45110e84afae14c63135","ssdeep":"","tlshash":"5ad05be0be38881d09b577c26cfb1b6a589d8041c6402309a96ec9352d6851c7555c19","first_seen":"2025-08-09T19:44:58.533266Z","last_seen":"2025-08-09T19:45:15.600994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5973,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_pepe","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:47.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_pepe HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":276,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6fa3870e752635661720466df0ddf28b","sha1":"aeacb1dff40813d3b0b1e936938bb38df305ef3c","sha256":"4c8345fe749940fd3c68ab12f3914cd0f0037d66ae6d7c3a4617a6ff8033ae9c","sha512":"969db8e8c57abafdb4f951beba0a96e819aad539b610d575effa77197377300d778ab0d34f04cc7dd39a8d8f856d48c5c6cac6f33b748ccb444a767f699c70e3","ssdeep":"","tlshash":"a7d02be27e754d14067397c2acf52bf9f82dc009d042130259adda3932ec518b70dc32","first_seen":"2025-08-09T19:44:58.53499Z","last_seen":"2025-08-09T19:45:15.689196Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4970,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_eos","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_eos HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-08-03T02:44:22.624109Z","times_seen":351,"resource_available":false,"data":null}},"time_used":5974,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5974,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_xmr","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_xmr HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":245,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"160493b9c86039b888c13f945dc651ae","sha1":"04d606737d6b2303b8d288a9a4fb50fbf49bfdfc","sha256":"019caa430bfa4dc04f70547089855aaadbd50b171aa010f4c14fa2293e3f2c91","sha512":"d5b1149fdcfb562c00738730e617c9203f9c54fa6b38af7bf59719d31d5b10f08ca3f0d845d269ec012009cf1ecfa524b2dcaf0489ce2af860e63bfa4df3064b","ssdeep":"","tlshash":"85d0a7f43e784a1d10a5abc36cf517bea49cc996c24146075ffecf62296d1187135c23","first_seen":"2025-08-09T19:44:58.537113Z","last_seen":"2025-08-09T19:45:15.708883Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3928,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3928,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/BCH.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/BCH.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Nov 2022 15:52:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6363e3aa-e86\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3718,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"ceb22af48692db74ae22f6892bd8cc7d","sha1":"a169f22c6828df50428b9c044ccd8f92834c122e","sha256":"1ba1c59bbd92737d720f5d5df59d2674830fe6c09deb757e23540dccecb5310a","sha512":"22d0b05dcb30a9fdd4554da487b9558fe945d89e0c969a932f07fe783e06449cfc5b8e5c15d9839e8ab0a46377b3e55a71263b6afac7a586aeb04f2bbac2c1c6","ssdeep":"","tlshash":"14717ed19717ea53fa27439331241f3759afc6950e902580879292d51215ac711962ac","first_seen":"2023-06-03T12:58:34Z","last_seen":"2026-07-28T19:23:40.873367Z","times_seen":373,"resource_available":false,"data":null}},"time_used":1052,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1052,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/AAVE.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/AAVE.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Nov 2022 15:52:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6363e3a9-1d26\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"1e4fb53364a553f65bd6ec3f3e023efb","sha1":"0b0709507914d48422e154e322ad67ad18bb4b76","sha256":"03579a2133847bd338e3e36c718ade13cb5beff8877c82e9792df2fed29e93a7","sha512":"531c3cb811e370eb0c3ee723087582ab226bfac6228ffbbe80deaa1b59f51579c9c6bb89a7f4c0a5c88034758cf457bc0a4320ba6ab0fdd560a64e21859b0f5a","ssdeep":"192:DJGYhMdsWTVDAtOW7NdIJ5kyKXgLnX/A1biUEEb17RXZsjX:DJGhieAAWZiienX/YbiUEG1xZsjX","tlshash":"ddf18effc1a105a3e60dacb08a74dbd8b6e1a425fa8c6652fdb6d3053d005335c75aa2","first_seen":"2023-06-03T12:58:34Z","last_seen":"2026-07-28T19:23:40.85063Z","times_seen":336,"resource_available":false,"data":null}},"time_used":1047,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1047,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/SPOT2.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/SPOT2.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jun 2023 16:34:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"649326a3-22ef\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8943,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 224, 8-bit/color RGBA, non-interlaced","md5":"12400509a3f5eb7ccd812b3b286502d0","sha1":"25efab675823947ad48dd6100c7f0af9c492ae19","sha256":"156c3d5729fd2b071e12a05019b38ee85d02396c1c2de8a49168c4a8abd5a686","sha512":"1877197c62ef67de46b59112b6b124da2ce5a3a494d984e82653ae4eec6371421fd6829fc5d3d7ae2221c6a0360005309b893ef04ffd5d623df22a5381525d89","ssdeep":"192:ZzSIiawKTdVxcSRZtygS3A9OnPO7tL1/1ae7ubcunmaay:9SIFzVR3tygZOPOpLjvuYDy","tlshash":"2b02bf8ed78189904ced59d04569b608731f469c07382eca6e3fe8602f954fdb47bb4e","first_seen":"2025-04-27T12:34:58.431816Z","last_seen":"2025-08-09T19:45:58.329657Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1024,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=f9eafae76782464737869b970a24295d\u0026track_id=\u0026title=OurTeamr\u0026referrer_url=\u0026url=https:%2F%2Fooourteam.com%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:41.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /hikari/visit/visit/start?ent_id=f9eafae76782464737869b970a24295d\u0026track_id=\u0026title=OurTeamr\u0026referrer_url=\u0026url=https:%2F%2Fooourteam.com%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-is-meiqia-domain,x-is-standalone\r\nReferer: https://ooourteam.com/\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://ooourteam.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: x-is-meiqia-domain,x-is-standalone\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Sat, 09 Aug 2025 19:39:41 GMT\r\nEO-LOG-UUID: 5483222131081640226\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T22:58:19.341154Z","times_seen":17714633,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=filusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=filusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:45 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3285,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"aadaecfeec7d0d409aa0191ddec4aabc","sha1":"b8e28fc98ab1e09c5c9d081d7b7c721568704424","sha256":"31b5d5414b746c06ece86a75b4ee27c621e9653cd45fbc27658ce2c20b68c887","sha512":"589a396a852563a7e7bed930b58a231da4f628f02de6fd7b1d0b1adea7eb524357b11610680f37f6cc770809760f8380ad22e443c610e9b53b827a2327800dae","ssdeep":"","tlshash":"f76130bd42fc79d1141c29810a982beae67f19e75b1f34fe396674c4de106ba9c8180f","first_seen":"2025-08-09T19:44:58.543771Z","last_seen":"2025-08-09T19:45:58.276472Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6033,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6033,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=usdcusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=usdcusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:47 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"bd09ce4a965dd8a9c66dcb9debe94a97","sha1":"91d6f2d415d3a96f3afb46999ec1da44cda2ffc7","sha256":"82f54fc0749d769316879c0387fe01a748a3f47d1c664bc0d8cf2c71656b1b0f","sha512":"e8984f05fd0d41b1c8df4902b43aba4a83362d1a72ab663edb3df72d2dbb6f679788ab57c555eb6f804d3cdac7d396e82b9be8a27199a406cf8878f533ddd782","ssdeep":"","tlshash":"976135f842b978a1080d584e6c0a1be9e54f18ef4b1f3dfdf86579d0d6250b68eb054e","first_seen":"2025-08-09T19:44:58.545265Z","last_seen":"2025-08-09T19:45:58.355013Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9960,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9960,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"camorope-client-a.meiqia.com/push/127/sduqersp/websocket?browser_id=c67533787c5f7abff9abc5683abe85f8\u0026ent_id=456256\u0026track_id=31419udXiDjnuxpQ2KQ6HZu1OfI\u0026visit_id=31419wXXbUZ2Ktklo3vxNmH5ySa","fqdn":"camorope-client-a.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /push/127/sduqersp/websocket?browser_id=c67533787c5f7abff9abc5683abe85f8\u0026ent_id=456256\u0026track_id=31419udXiDjnuxpQ2KQ6HZu1OfI\u0026visit_id=31419wXXbUZ2Ktklo3vxNmH5ySa HTTP/1.1\r\nHost: camorope-client-a.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ooourteam.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 1T/sSMkGbnNS4g5ikSAaAg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nconnection: Upgrade\r\nsec-websocket-accept: GDUlYlqi2EaKw+dfj8TbU7RJ8Ao=\r\nserver: istio-envoy\r\nupgrade: websocket\r\naccess-control-allow-origin: https://ooourteam.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: *\r\nDate: Sat, 09 Aug 2025 19:39:43 GMT\r\nEO-LOG-UUID: 5775743927597026226\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T22:58:19.341154Z","times_seen":17714633,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":0,"dns":1,"connect":19,"send":0,"wait":436,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/list.svg","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/list.svg HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 342\r\nlast-modified: Fri, 29 Dec 2023 13:32:48 GMT\r\netag: \"658eca80-156\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":342,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b193b042e0da32c4dacbf53223737892","sha1":"88bf44995b921c2fec6bb8de7f4d24bf704de338","sha256":"f648262a952525859ad832f8d953a39cc02fe65c5e31defc7731a958a2ea87e3","sha512":"38f15a7ad137bc2114c002e46692b369d29bb661ca9c7746d2780b9b8cf5baa6ec5162726bc4c28bef2c56016d5e383b0b3b04bee848d6fc4e6cd64994e626c0","ssdeep":"","tlshash":"b2e08617e3cd8c1cb5200611df6c31b5902254a3bd5d1bd9dcb3057a515805ca47fad8","first_seen":"2024-12-24T17:17:56.673812Z","last_seen":"2025-08-09T19:45:58.402466Z","times_seen":25,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/ETC.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/ETC.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Nov 2022 15:52:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6363e3ab-a5d\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"15826e5fb164bf4513d121f8c6e7c5e3","sha1":"80f6393cc2db82bbf1b7fd6a941d2e4113815a02","sha256":"f8a590615ba750a27e905a047173734c8b0c58848566adfc54d4b4bfa2d431de","sha512":"7699c10a056fdca26c633f039462370271929b5ed33a414430c93b054935c30d0bef37ee244a445e5f5cccabd4c871f8f33fef2d4e6e0e3561e4a28a06bb419c","ssdeep":"","tlshash":"24514c7ec0d3d8708c54107e5bdd8d8e9128816c339f9d48b1d49b164b0319e687e149","first_seen":"2023-05-31T10:27:17Z","last_seen":"2026-07-28T19:23:40.827397Z","times_seen":500,"resource_available":false,"data":null}},"time_used":1049,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1049,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/link.jpg","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/link.jpg HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 09 Jan 2025 01:48:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677f2af8-9603\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38403,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x1280, components 3","md5":"dac33599438ebd9e0f5150ef7a27ca3e","sha1":"7adcfd6cf9104e048f30b7390f6f247f97aeee11","sha256":"c3b5683450813c5b2fe0bfce4f4b52bfcfda74d30ca491e5db0a7fbc03073bbd","sha512":"79ff0e6eac7bec64ece786afffc7f571dfb360dd21d5661f9aa5de06511c1e28589571fd888613513a6b2b36568257af4b99911fec3a699e63c04d480f066fe0","ssdeep":"768:UE/4mqSUJuVyM7EnaHI/c42jA2H1lPqVQthpENNYszyC:U5mfVyMod/SjfviVQtLcNYO","tlshash":"b103b04711abc8b3e49d0033c1d7026cdb1a6f364afca279a3b4a7621c345e0ed79e56","first_seen":"2025-04-27T12:34:58.49554Z","last_seen":"2025-08-09T19:45:58.404007Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1043,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1043,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=htusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=htusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 7\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:45 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-04T22:56:30.544215Z","times_seen":313902,"resource_available":true,"data":null}},"time_used":6021,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6021,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=trxusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=trxusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:45 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3589,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"1bc6f6a4363a123f486a53032149e0d5","sha1":"cfd4b2548531a119373aecb0a5c73cc3addb88ca","sha256":"1261fa902059756bfe6dfed049a18cee36af20a59383f85708c57c89b027ebea","sha512":"18c92123354c10fa2aa81d778bc40844fb250c430f0f4ae36dd4a15cd160792566fa8e06b5536b1a2842d768444d4bf060ee1a8bd6bfbe3ab7587045f32be4b3","ssdeep":"","tlshash":"c0713abc42f87891191c690115592beac45f38e73b1f3dfd386abce0cad053a5ea584e","first_seen":"2025-08-09T19:44:58.552321Z","last_seen":"2025-08-09T19:45:58.35862Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6020,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_btc","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:48.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_btc HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4779d8de1236065e5de1c8b3ff8398b9","sha1":"a73f33f376807b7f7428d5711d49ff49d8613bbf","sha256":"61b669f0cc8311df16a033dbb5e73ca3670014fd07fbbac13138d352374a9bda","sha512":"e3d91a9940c7173c05830ab687af52297ed0dbe581c209e5ccd5b416abae329ff4cbe6470bd2dafa93147adef1555e349a5ff992b5e87bde48a7c5bfde864714","ssdeep":"","tlshash":"d1d02ee0bb38883a0cf2a3e1a4e5135b8c4d0481c1c403083abd8fb860bc23c2323c21","first_seen":"2025-08-09T19:44:58.517812Z","last_seen":"2025-08-09T19:44:58.517812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-09T19:39:37.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"Bootstrap:4.5.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:2.0.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"FlexSlider","description":"FlexSlider is a free jQuery slider plugin.","website":"https://woocommerce.com/flexslider/","common_platform_enumeration":"","icon":"FlexSlider.png","categories":["Widgets"]},{"name":"ECharts","description":"ECharts is an open-source JavaScript visualisation library.","website":"https://echarts.apache.org/","common_platform_enumeration":"","icon":"echarts.png","categories":["JavaScript graphics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":146666,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (916)","md5":"1eb60ab9c642346a5a1150c14f082810","sha1":"47d90525fe1b86012cffd4b29c45dd62eb153b10","sha256":"61f0d7b234135ee17138f4844b2f2e0c3437b717a8bb27e109986deeb7bffc6a","sha512":"2949a74457b80fa589b58c15c6674742f86bdd65f3da05a68908b4078f8360ffc1b3139afece0886aba247a4a90a73595431f6a82a31a7a0501918a56a7626a7","ssdeep":"1536:Tydbnv1x0pvltNuSmrkA6NRGwCCzkH8EpGvGF:TydbnvQpNtNMr7bwCekcEpGS","tlshash":"05e3b764b7ff00692823a1949f76161634f6a533d60ac414bbbc2e80bfcdd4da8636dd","first_seen":"2025-04-27T12:34:58.456775Z","last_seen":"2025-08-09T19:45:58.328961Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1587,"timings":{"blocked":533,"dns":1,"connect":261,"send":0,"wait":522,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@4.5.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.5.0\r\nx-jsd-version-type: version\r\netag: W/\"27293-TxSgmmBsmaEfj9oVVk72b3BAKCY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\nage: 4901342\r\nx-served-by: cache-fra-eddf8230133-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 20915\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160403,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-08-04T21:14:11.463272Z","times_seen":25866,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":107,"dns":65,"connect":26,"send":0,"wait":27,"receive":6,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/usdc.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/usdc.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 May 2023 07:53:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64536462-8c6\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2246,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"34a0a93a76960505d00647f82a235bbd","sha1":"b8889c12217678bb8de7b60ba732bb00ef7eaf33","sha256":"98c9a5f555cda2c13172162655b6d2f9903fa6ba00a86b694dd628d45c5a5780","sha512":"5187eea1e6a1265fef0d70c4c1f03f63f3adcfcab98640be5d6d94ff9d83856049ecb0426d6c313126d9d9e7c9a35eac8c8f1347412e75d0af896ea6bcbd49a6","ssdeep":"","tlshash":"b5412c03b1f04d9ad29b1f3db919085ff02e09ea1949c87f45e7790ebd6aae1c345711","first_seen":"2024-10-23T13:33:33.452912Z","last_seen":"2026-07-28T19:23:40.828509Z","times_seen":297,"resource_available":false,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1038,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=etcusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=etcusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:46 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3412,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"2f98c45d5318cda70c60c2c1111b5916","sha1":"c3b3929606a257aec5612c2ed85c5a8f55be7730","sha256":"62860dfb07322c9420cb5652e5c5c9f11f282674b4e0995cbddfc7cb0fbce38f","sha512":"00b3543630ab0346ad36c6558946507a815619d6e6a016cb95c8b50b0e223173b0e75a98b2f0a6d3f7edf2dbaffb39564a91e561979ec35043e59f7945af5ed7","ssdeep":"","tlshash":"486116bd43f43a95011f084941486bead49f28e31f2f3afdb86971d0ea10576ad99c0f","first_seen":"2025-08-09T19:44:58.560569Z","last_seen":"2025-08-09T19:45:58.260805Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7874,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/bootstrap5Slide/bootstrap.min.css","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/bootstrap.min.css HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-2f0fa\"\r\nexpires: Sun, 10 Aug 2025 07:39:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":192762,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65184)","md5":"cb46b85888b78de64c1f51bc7797aacb","sha1":"e57147e69810b9ee63af657969ddfd6c456957e3","sha256":"652650f2c09a63e822932e07d79583c64a996e44ff680e2a9183c2a7c5b2531e","sha512":"cdf48d3e0b60cd162995316ce921e3285248d481378251f13403c39302baba3efe6332a537cccf255e2261b8c39d719ab1a9efd83e97111ed321e11dd0eefdb1","ssdeep":"1536:rQGFA+QbGwz48MIEtQ12c2Jsj+aeHYAVmJz600I40Yw:rQGqAVmJz600I40Yw","tlshash":"311492a7f581201ee493c10995d2bffe057f9586d3021baaf42737b44b452eb8a63e4c","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-07-28T19:23:40.84948Z","times_seen":3304,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/contact2.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/contact2.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 29 Dec 2023 15:23:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"658ee463-1e07\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7687,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 760 x 348, 8-bit colormap, non-interlaced","md5":"2a6c57f5b622157f68fc1fa5c82481ff","sha1":"88cce6e52f5f94f027933fb6e15f959e0c31c2e6","sha256":"f8d615ed240a38dfc1de589cc9573f30a4fadb83280db7f19157a648bf8ca393","sha512":"d419cda26e4c660d7863bb976c9f6c6ec41e72bdd94292c68c545bc09719d2422b314715fdfdaadad7c729edda63f096c180c17027e76c59e571a74db78c29d5","ssdeep":"192:AuXW4301YHIyZyPnjOb5zYCEIXLmqZRiLIfPmAoSDDyb:1RMgyPqb5zYqPZRPH7oSq","tlshash":"e0f1aec53acd64a7e90916b7722fe0415db1f4ee3eee4f20031e444ede2bd50c089568","first_seen":"2024-12-24T17:17:56.712672Z","last_seen":"2025-08-09T19:45:58.349196Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1025,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/topSecurity.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/topSecurity.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jun 2023 16:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"649326aa-40460\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":263264,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1069 x 856, 8-bit/color RGBA, non-interlaced","md5":"5650f4559619c23a6a01772d8b43e5f7","sha1":"60383233f78ae9187e325552e703b3eb1259bfe7","sha256":"73ac5379ded483277b4384f8d177f013b9156a3508a0675063ec1b3a0521bc31","sha512":"31eed0a88724ab11a1452867ac7df575d81ab006e0a8c6b6e28a0581086903f8365b3aa7c22cf88252860a0a58eeaec302a1c72049b2e15808705d49761fce6d","ssdeep":"6144:YrAmjW4xdu1pIcmcpabtKeaVncvqCp+Dx8UdN3qxIYX:VmjDDu1pIc3pagcgHtqxIYX","tlshash":"7944136d326a2fd3e134e3b043bf279197a0646ce85a48e8e1bb6beeb50d1147d01935","first_seen":"2025-04-27T12:34:58.466645Z","last_seen":"2025-08-09T19:45:58.258407Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1025,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/indexPs.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/indexPs.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 29 Dec 2023 16:05:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"658eee55-6634\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1106 x 826, 8-bit colormap, non-interlaced","md5":"f3b8b476c29fad860a02fd4cab8a1875","sha1":"3d4a2292c110ea4716e5e383e6154098e149d514","sha256":"c95151ac5cc02413ca37fcb9bed44577cdd57f762fee5e6ac152c21577474641","sha512":"983c582dc48dbb70cf747e74c25b737967532d4c7e1d9628cfc4be4d7a446dcc3c3a2f8c7423921ba82161e450343d59078c7512cdf568e1c9827c77a6b78de9","ssdeep":"768:1RSRITNfpyjUBNvfB2rPJDgxU7mxhu1bZ+9:CRITtpywHXM74U7mxhuS9","tlshash":"33c2d167bdac80c4dbc465f8654496e2399faa4428538ee74f0870478ff32d54866b22","first_seen":"2025-04-27T12:34:58.45076Z","last_seen":"2025-08-09T19:45:58.357226Z","times_seen":7,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/UNI.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/UNI.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Nov 2022 15:52:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6363e3ad-d98\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3480,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"05022933cd2233fd9dff586e2ff3c836","sha1":"492755f70f4072ea7e31ee85d8a72ce31b3c0334","sha256":"39d66dcc92b0d7921d64b7ad8786a5633e9d590969fa36ec338b6cc2e42ff3d6","sha512":"f7ecf237309e5dea124de18e1178066226a3d768425e3cb425dde756c7d0899e42f4453c47a0652fad10e527867e035bec8c8abc3d4c700dfb1d8f5488fb3807","ssdeep":"","tlshash":"2c716af6a80330f2eee62923c0089102800fb59269c308604f04fe6bd41adebe7d5ac2","first_seen":"2023-06-03T12:58:34Z","last_seen":"2026-07-28T19:23:40.865686Z","times_seen":345,"resource_available":false,"data":null}},"time_used":1052,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1052,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.4.197.prod.20250731_156/static/icon-mq-round@2x.png","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"38.175.44.17","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.4.197.prod.20250731_156/static/icon-mq-round@2x.png HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 19:39:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 10613\r\nConnection: keep-alive\r\nServer: AliyunOSS\r\nx-oss-request-id: 688B0ACE33DEA93836CB4A47\r\nAccept-Ranges: bytes\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18155014595444198583\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000102\r\nx-oss-force-download: true\r\nContent-MD5: eFJTC4zNbCVOLHJ7KGvTcA==\r\nx-oss-server-time: 3\r\nX-Ser: i30939_c15259, i2260953_c27847, i1940245_c22409, i1979063_c23797\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET\r\nContent-Disposition: inline\r\nAli-Tproxy-Dns-Update: sync\r\nStrict-Transport-Security: max-age=5184000;includeSubdomains\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10613,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 1216, 8-bit colormap, non-interlaced","md5":"7852530b8ccd6c254e2c727b286bd370","sha1":"ae3cd963a27096af016b06697e4e7c08caca6cda","sha256":"df6e80ba7392005025919531597d0f64f8046eec8ee14bcdf3e05760264fe874","sha512":"48fb7a2c9d8c1240997272e706b521a688bbb5c57b7912412389a67c7b5a837c8e16a7c93d7605222d867f20ab99a221f8ac91cf30bb295eb1902e3fe1028515","ssdeep":"192:HtnVTX337t3accoDwSQY/Wm6j3bOHluea7uCTLQvpWj+A6JCzIj+xLM:HVpnp1coDwQ/WmM3aHoxnLQvYjjUj+LM","tlshash":"4022a091aa5af0ef811151f84b3973f761a07da2c9484ce9121d71d9a33fd14f40fb2a","first_seen":"2023-04-10T11:55:01Z","last_seen":"2026-07-10T19:44:37.299382Z","times_seen":2048,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_btc","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:50.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_btc HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4779d8de1236065e5de1c8b3ff8398b9","sha1":"a73f33f376807b7f7428d5711d49ff49d8613bbf","sha256":"61b669f0cc8311df16a033dbb5e73ca3670014fd07fbbac13138d352374a9bda","sha512":"e3d91a9940c7173c05830ab687af52297ed0dbe581c209e5ccd5b416abae329ff4cbe6470bd2dafa93147adef1555e349a5ff992b5e87bde48a7c5bfde864714","ssdeep":"","tlshash":"d1d02ee0bb38883a0cf2a3e1a4e5135b8c4d0481c1c403083abd8fb860bc23c2323c21","first_seen":"2025-08-09T19:44:58.517812Z","last_seen":"2025-08-09T19:44:58.517812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/nav2-2.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/nav2-2.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 342\r\nlast-modified: Thu, 22 Jun 2023 15:44:00 GMT\r\netag: \"64946c40-156\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":342,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"19fb11fb7a459a269341a5507e78e9dc","sha1":"25a7cfbb6a85861719ef14110115d0a75e4fe10a","sha256":"77c1dcfbe893a08e9167fe307ae989a7ca236380ff9da9f1931be21ea5f4dce3","sha512":"3192c37123680bafed427f5db0328dbc5bda0ae46ac8faf560f66b3a12425635eff4daaa7ad90cece5f81b6ae42c1963aec5c70367cb6b0b2e8871aac4f89615","ssdeep":"","tlshash":"9ee0c6eb22c880bd854a283559ef048ae893a22c0823718c15b6fb2e6223484a2002b6","first_seen":"2024-07-03T05:01:40Z","last_seen":"2025-08-09T19:45:58.359324Z","times_seen":206,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=f9eafae76782464737869b970a24295d\u0026track_id=\u0026title=OurTeamr\u0026referrer_url=\u0026url=https:%2F%2Fooourteam.com%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/start?ent_id=f9eafae76782464737869b970a24295d\u0026track_id=\u0026title=OurTeamr\u0026referrer_url=\u0026url=https:%2F%2Fooourteam.com%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Is-Standalone: false\r\nX-Is-Meiqia-Domain: undefined\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ooourteam.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 39\r\nreq-arrive-time: 1754768382214\r\nresp-start-time: 1754768382254\r\nx-envoy-upstream-service-time: 39\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Sat, 09 Aug 2025 19:39:42 GMT\r\nEO-LOG-UUID: 5554470493597552264\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4903,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8ca25bc34d8900c91888b475bf6d1c19","sha1":"576c730e54cb954b4e0f5d731b509aef9ae00461","sha256":"d3cfb3cb67ff4044a4bd1e02ddf07c95f08e4c0ef2c4c66cb80445325ecec237","sha512":"410277707ea5dfdc42dfa7f9f397931d3d70decdbef02e6ad1e5340593747be6da96a8baaef3727a1439607b7bcb3c9542df8a7cd32517ec0ea5539355ef4bca","ssdeep":"96:1LaY9vGcCff8Bo/mFtR2BUMqnx49OLqweybgbTbqlrsjoF7NzOZXbj:1LaYwcG5mbR2Zqx49kqwLbgbTbqlrsjF","tlshash":"11a1a256902dceb50ae04742b69a3615aeec14d2f4cc2f95c39cdf2826eb5cd730d62d","first_seen":"2025-08-09T19:44:58.572162Z","last_seen":"2025-08-09T19:44:58.572162Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/bootstrap5Slide/flexslider.css","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/flexslider.css HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Apr 2023 15:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"644a9222-1b1c\"\r\nexpires: Sun, 10 Aug 2025 07:39:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6940,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"df757c10d61db76d72f3a1aa5ba02880","sha1":"1101f3bdad4263e0bc51fc7ed5b2644e01c038f8","sha256":"77f76910108b7062309dd6bfa310123a867fca01b12eef62c37e5d2d0d0cc794","sha512":"1d663c8bbee93cb2f6dec538a478fee62b991269a6bb661a89351c5ab057a81453a67eb251d0ef94518d986d2aca30e0fefa6df9858d3004a383d33478e53d0c","ssdeep":"96:KnSjtVxOrS1MWfviQzOCpfkcFQ2YOdJS5r:PjvJ3NJFQxYJYr","tlshash":"d5e1d17c16f40704a827c16cae42db1ea7acc002961ed85de5e11638ceea389c973bdd","first_seen":"2023-04-08T00:25:48Z","last_seen":"2026-08-01T08:54:30.079128Z","times_seen":876,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/act3.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/act3.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Feb 2024 07:38:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d3058f-16e4f\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 856 x 400, 8-bit/color RGBA, non-interlaced","md5":"ef5b5acde71412cd0f3bd9357b54e26a","sha1":"49e0e65f48d2d0e611320d765a7aa14ed9ef04f0","sha256":"483347e723444212c934d7039b59756e53339a89bc008ceafb5c7f27770e8755","sha512":"833eaf65e7ebf7ee989627f0303a37cc3490c6294b8175eb9f0855b7411db392b59752fe231a88104388162f2b51a1ce13d9b5ae5b50a612eda36fc6c6fb9142","ssdeep":"1536:i/myfbVMYRLBXf1Wlz+VtwwIV2Qh9QLRxQSgDfnUavN/rjP3i6tgLJ:byJHf1g+VtwwI8QjQvQND/rjKzLJ","tlshash":"8493128d4063a6e855eb7d4bcb0068468d8e790f09dc987eed230c9c4a937cb7b5964b","first_seen":"2025-04-27T12:34:58.426113Z","last_seen":"2025-08-09T19:45:58.39099Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1059,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-2c9e\"\r\nexpires: Sun, 10 Aug 2025 07:39:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11422,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-08-03T21:52:32.070577Z","times_seen":14260,"resource_available":true,"data":null}},"time_used":1008,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1008,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_uma","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_uma HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e65dcf77bd7f5212cf7ae50c0914fe50","sha1":"36c704eab4f9efc6454e3373bd6066b0e76c0c8d","sha256":"f4cae7fc3106c7d46138dba2c73f2e86269672de907adcfdda9ca2c91dafdcc6","sha512":"5a84ae0ac41be9be7c85c3bc235bcfb227a8cde57dcbe597639a914479cf2105519575ac6536388a09f21dbbc1d4fef6e518b5f90d78a4294f7cb28021a94aa6","ssdeep":"","tlshash":"0fd05ea42d7a041500a2abc27cea167f685cc49190424705abbeca352aa8519715bd2b","first_seen":"2025-08-09T19:44:58.576892Z","last_seen":"2025-08-09T19:45:15.680673Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9925,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9925,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/BAL.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/BAL.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Nov 2022 15:52:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6363e3aa-922\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"434f95cf398ff96a140cbd3cae92cac1","sha1":"14ec93193a85de4ae155b6ad0f2a3edef58cf9e5","sha256":"920c160bd3dbb09de22b942672c48a724c389143c6347f841d60e6b938f82923","sha512":"e90d9eca88e37b4d2f5f7291ee9b3184868b6c8cc22f8a31f5190fc4359c209b6203d3feb696540111e1d8e543942446d0f1750eb8e1c58f9945e6f0aa042f1f","ssdeep":"","tlshash":"a2419854d2b8e49add276bf7a4159f33956bd129f6c80a40f5a87a3c0903f449dc52d0","first_seen":"2023-06-03T12:58:34Z","last_seen":"2026-07-28T19:23:40.868989Z","times_seen":331,"resource_available":false,"data":null}},"time_used":1047,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1047,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/contact1.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/contact1.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 29 Dec 2023 15:23:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"658ee465-26d5\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9941,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 760 x 348, 8-bit colormap, non-interlaced","md5":"855fff13e94aef58b35075de71c21e3a","sha1":"88f8c1d8df3a6e84464d70acfd8c0dc25142f4c8","sha256":"c062f36435918e04d259cd8a8c7219763e45b92967e0dc30f427b719aa5d8672","sha512":"66c4e11a45f22a6b7913fb438d7f7da91662da6667ea6d7f52ca106c44172e491fd5d4099e4b9fa15db7a9301d1364ee6eaa8dd2d389745b0f7f8bc20aeeda00","ssdeep":"192:+YEX/bW69lmZ8VgXndkIaU1GmlvV2t5RXSRIBLijwx40frFKCe+Sp:IXjW69lmZpXdkIRl9+XwIZX99e7","tlshash":"2022c02a30bf5281f98f07f57f9489c037b8117d6096588e9be873ec5344045ee7856c","first_seen":"2025-04-27T12:34:58.43078Z","last_seen":"2025-08-09T19:45:58.312423Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1029,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/SPOT3.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/SPOT3.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jun 2023 16:34:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"649326a5-3763\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 224, 8-bit/color RGBA, non-interlaced","md5":"a805aa37de0741945ba3551f5e9fef31","sha1":"33552a1cbd4bdd0c1611918d9ec67b4e59a90434","sha256":"1ed2f9a0471b468a1025517d7e981842665145dece5cfec1be88b8b87be3bac6","sha512":"6b841c4102a7c1201c0872f732608fc6e879e2126f1ca0643f0b58d915d2cab4fc5beb953575f097446e8033768aca159aa26d84454e15559105ee7e9c3fe858","ssdeep":"384:8ewgCiFDXiz1j247jJzB7WZO7aN1TQEaRXmLc/sHAZ9:LwgTmZbtZYsEaR2L9g/","tlshash":"3d52d0f532772c5f86c8327d4e6c2884945eddb30a16233238219ed26bce94dc59af35","first_seen":"2025-04-27T12:34:58.491698Z","last_seen":"2025-08-09T19:45:58.396601Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1023,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=dotusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=dotusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3290,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"bbd3f688a50af1a63ef9e13e7e229c2f","sha1":"ad3c0b262b6ed0d838ab1706c503337876cf2d04","sha256":"b45771723d77b989189490358262fa66a1ccd4a18e760caf9396c2298474d41e","sha512":"7fb4b287062f9aed5f1ec5078920ce310e400cee5639c86e782e6f0f1e32730d728da1e7b4fd6c3cdbcd5bfb81754f09545fb343b695fff5ea3b172c18948538","ssdeep":"","tlshash":"f96156bd43fc3882640c6a4129486be9d98f58ebdb4f38fd786679c0db60572dd8091e","first_seen":"2025-08-09T19:44:58.583562Z","last_seen":"2025-08-09T19:45:58.36982Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3971,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3971,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Home/static/js/jquery-2.0.0.min.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Home/static/js/jquery-2.0.0.min.js HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 06 Nov 2022 06:04:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63674e81-1493c\"\r\nexpires: Sun, 10 Aug 2025 07:39:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84284,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32061), with CRLF line terminators","md5":"e22f82a5194d1f03ecb712baad2df66c","sha1":"6a9afa00acf537cbdede4aea27f01f8ef6ab165d","sha256":"ac1b82725819fba761d03c03a208214a9157bb026cc5e843d43105970407603a","sha512":"141dcfb31585ad569e19e7769d32a5544219fc1a010611337777f093b1c7143cd8de374b1b50484709a7f42fa472561bbb8976510d06f62f2cf34e3426bde0d7","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38NdTuJO1z6/A4TqAub0R4ULvguEhjzXpa97:oNM2Jiz6oAFKP5a98Hrq","tlshash":"f583d6d9b2c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:26:50Z","last_seen":"2026-08-02T22:23:03.310055Z","times_seen":863,"resource_available":true,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/1INCH.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/1INCH.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Nov 2022 15:52:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6363e3a8-2970\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"15d97161b65ddac5d4abad667dcddff6","sha1":"cc213aa8e905bee08ba0cb391d9ac525111270b9","sha256":"5c15c5889ca614021ec4458b6fa8180585a9d648161788206ab69a1173ddb780","sha512":"0a0d2b8f8262476940647be1d45891434d1f3ed1169161e2f5d6eb333f8168e89beb7719c846c4efb495a628a9f4fae810183b4ce663adddbcf6aa1e14b71d37","ssdeep":"192:5fSoETndenJtcoAPbMYjSVrz5pnYSPQcOGslchh4hplrk5M:hSHTCmu5yJfjBplAM","tlshash":"0a22bf4abc657815814f24db81a6cd1d86ff8dc17926c12d248ed22803daca7f8ba683","first_seen":"2023-06-03T12:58:34Z","last_seen":"2026-07-28T19:23:40.835155Z","times_seen":321,"resource_available":false,"data":null}},"time_used":1051,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1051,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 09 Aug 2025 19:39:39 GMT\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1d36d233d9c0f7c364f48f7d56e0b235","sha1":"2f2c9cfb1773251acc45666d79012d2d12f6ae68","sha256":"0f0b05ed157cc05e1e000e1ef617d9ad8c2033adbc8e3621a6dc733c9e8b7105","sha512":"7b52cd11500c31ff8dd0ced378bd95eba5d972dc2819c68b0151f58a5fe3a3c47ff32a0d09e78cfc857303640a64edbae9523dc43aa3e9ba0e1873d5d0b9bf24","ssdeep":"96:BOEaeTxOEaGFZOOOEavOEaPJc+uaOEarNqOxMaeTxOxMaGFZOOOxMavOxMaPJc+E:OI+Tp4LUBI0TXiLeSIbTwRLdq","tlshash":"93b17591045bd400aa432cc66bcf7f37ed4e62113464c57aebfd9898dcabd272264b1e","first_seen":"2025-06-04T02:16:48.774873Z","last_seen":"2025-09-16T16:32:10.641472Z","times_seen":640,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":143,"dns":0,"connect":7,"send":0,"wait":17,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Home/static/js/jquery-2.0.0.min.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Home/static/js/jquery-2.0.0.min.js HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 06 Nov 2022 06:04:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63674e81-1493c\"\r\nexpires: Sun, 10 Aug 2025 07:39:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84284,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32061), with CRLF line terminators","md5":"e22f82a5194d1f03ecb712baad2df66c","sha1":"6a9afa00acf537cbdede4aea27f01f8ef6ab165d","sha256":"ac1b82725819fba761d03c03a208214a9157bb026cc5e843d43105970407603a","sha512":"141dcfb31585ad569e19e7769d32a5544219fc1a010611337777f093b1c7143cd8de374b1b50484709a7f42fa472561bbb8976510d06f62f2cf34e3426bde0d7","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38NdTuJO1z6/A4TqAub0R4ULvguEhjzXpa97:oNM2Jiz6oAFKP5a98Hrq","tlshash":"f583d6d9b2c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:26:50Z","last_seen":"2026-08-02T22:23:03.310055Z","times_seen":863,"resource_available":true,"data":null}},"time_used":1245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_btc","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:46.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_btc HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4779d8de1236065e5de1c8b3ff8398b9","sha1":"a73f33f376807b7f7428d5711d49ff49d8613bbf","sha256":"61b669f0cc8311df16a033dbb5e73ca3670014fd07fbbac13138d352374a9bda","sha512":"e3d91a9940c7173c05830ab687af52297ed0dbe581c209e5ccd5b416abae329ff4cbe6470bd2dafa93147adef1555e349a5ff992b5e87bde48a7c5bfde864714","ssdeep":"","tlshash":"d1d02ee0bb38883a0cf2a3e1a4e5135b8c4d0481c1c403083abd8fb860bc23c2323c21","first_seen":"2025-08-09T19:44:58.517812Z","last_seen":"2025-08-09T19:44:58.517812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3847,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3847,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/ETH.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/ETH.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Nov 2022 15:52:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6363e3ab-adc\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-04T09:31:41.487553Z","times_seen":23051,"resource_available":false,"data":null}},"time_used":1053,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1053,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:40.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-ent-id\r\nReferer: https://ooourteam.com/\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://ooourteam.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: content-type,x-ent-id\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Sat, 09 Aug 2025 19:39:40 GMT\r\nEO-LOG-UUID: 6200803946960382621\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T22:58:19.341154Z","times_seen":17714633,"resource_available":true,"data":null}},"time_used":652,"timings":{"blocked":194,"dns":149,"connect":19,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:40.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"POST /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nx-ent-id: f9eafae76782464737869b970a24295d\r\nContent-Length: 47\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\naccess-control-allow-origin: https://ooourteam.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=UTF-8\r\nreq-cost-time: 2\r\nreq-arrive-time: 1754768380695\r\nresp-start-time: 1754768380698\r\nx-envoy-upstream-service-time: 2\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Sat, 09 Aug 2025 19:39:40 GMT\r\nEO-LOG-UUID: 4666925723418240726\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":993,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3d1716e1907724b53586a6bd1545e72e","sha1":"29d9c2c3862cf6d45170516f98e212775a1791d6","sha256":"0a9ccad2d8c22aa42b6066c93ee1068784951f1becbdbd4ade479986d4f66379","sha512":"1e9080a758be98f46723fdf0fedc57dd389b618a651c41c0702a9cdb8215da4fb5dac6445035c60f148cfe78335d4145d0663fe1493d39f0210119b6a96bd2e5","ssdeep":"","tlshash":"cc115c6356a44c65ab2417cd9506690fd19bf45f4cc0f6ffd6507e00983b39612d835d","first_seen":"2025-08-09T19:44:58.588062Z","last_seen":"2025-08-09T19:45:58.362113Z","times_seen":3,"resource_available":false,"data":null}},"time_used":740,"timings":{"blocked":-1,"dns":150,"connect":19,"send":0,"wait":275,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/m_zh.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/m_zh.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Feb 2024 07:40:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d305fd-2cb4a\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":183114,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1206 x 1008, 8-bit/color RGBA, non-interlaced","md5":"1a4f3309e6e85dcb51092da5b29f1b0f","sha1":"94a8b433270902327edeec38e35a7d6623b001fd","sha256":"682c22ec13858a30dd7ab638130da75e317a1990a4d693d2671fc47c46501223","sha512":"61c93914489985847ae5722914dfc57a4a7a21d2494587832b002f66bcfbe800a22eb58254d1607c57bb81687d805095dae64f18a04d55ed3c06055b11c78fbe","ssdeep":"3072:qlxqyC+kbwWP/MCE6aXaMKcg23ZAgVy8DYEA5uMelPLHauHCv0oPdKvP2W/t2:EfkbwWP/MCYX1Kcg23ZjqEcT8L6MCvnd","tlshash":"b40412cd6663dc01ceff663a70219a0fe81e65995c45927216fa801dd44cea0b6e3bcb","first_seen":"2025-04-27T12:34:58.427978Z","last_seen":"2025-08-09T19:45:58.244608Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1031,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1031,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/coinimgs/.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/coinimgs/.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: text/html\r\ncontent-length: 504\r\netag: \"6462516a-1f8\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":504,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"b7f6c24fcd751e5a437f9a3700aa7074","sha1":"7462bb1e33a7a761363945ff31ff3e2b3a58c04e","sha256":"d7ee9daf35876b1fd867a1bff334dd0a2bf441f47b2cb3b8c4b7e33723d58678","sha512":"0af608e297389b14ff920bdc9335b777dd8314abe14da03627c62cf672b4218c47f7a91de98bd4e59e0b978c1f9ec1cb6ba2758542e51b0044b7972a486b8cfb","ssdeep":"","tlshash":"54f09e8340e14429111041302e9060054f4b7d8bdb5b4d0138afb1bbefc6a84c5635cc","first_seen":"2024-12-24T17:17:56.68958Z","last_seen":"2026-07-28T19:23:40.836319Z","times_seen":84,"resource_available":false,"data":null}},"time_used":4085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1011,"receive":3074,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=ethusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=ethusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3419,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"9c5cf5e4069f787438bf4df86180d001","sha1":"0e5dadd40a67669a0e91427a4167bea8892c8c4c","sha256":"42a30f232c432e9caf36a7d1664c7857faf7941b451936003e837af89f279110","sha512":"487b4a6a62dbb090f43578182c35e86a1b6bb8e770f2991da2b1ca8db67f73f3b8d880e546e7e22225fc7eb0d87b1345db050a21047b967a5e59a657d0129061","ssdeep":"","tlshash":"a96144bd42f879e5100c0c4259587be8c9af18e31f2f31fdb56574e1ea6057baea084e","first_seen":"2025-08-09T19:44:58.591598Z","last_seen":"2025-08-09T19:45:58.277509Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4019,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4019,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_usdc","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_usdc HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":246,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5b14f0fa433febb5f6a71a1c8c19626b","sha1":"22047e82cf4a1b5fa7e25c1df5347e03ed3a5c62","sha256":"cd137d615156672f2cd2fa2336917bcdcb9178bb7c609f2d9959aba5b76f8358","sha512":"a501c5ed2d693b16ee5f068b1336cf1de0f6e8bfda0abef1273030ba8410aba7372c9e7760256619838d0cc00a0194a03163f7fd6b48e003388009ac8b5905b4","ssdeep":"","tlshash":"06d05ee43a35851559a1a7db68e52eeaa85c8c5580814305d6afce3125ec11cb145c22","first_seen":"2025-08-09T19:44:58.593455Z","last_seen":"2025-08-09T19:45:15.61704Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3930,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3930,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/bsv.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/bsv.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 May 2023 07:53:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64536462-ed9\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3801,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"bc6293370eceaba626a50801c27fc3ba","sha1":"671be576385defa1b197fcdb40059172894a2f11","sha256":"b5681eb2f2e568333b59fce2ea981991cef95d07fc1efe6f3f51c883456f9139","sha512":"e9e824c8682cf5dec4dc4a60f7781ae67c382dfbdccc5fe684ad26f6dad123141b59f4d97becfc9f904dd0d3ec03113cc4b469246c26b59b63fd4eef3a7c44c9","ssdeep":"","tlshash":"e5716d3fa38192166b9cc8985f2ff9da5cc39289f384592a6e93114a1221255141ff9d","first_seen":"2024-10-23T13:33:33.473747Z","last_seen":"2026-07-28T19:23:40.832869Z","times_seen":271,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1035,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/product3.svg","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/product3.svg HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 29 Dec 2023 14:42:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"658edaea-970\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2416,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1111430c3f339f7be7171c6413621e6","sha1":"96c9fe3e25c85c6c1b30bc8a6da2f7aaaea95b3e","sha256":"42cb09a57c7516ddc1fa9c3f6fba7f504ae53736a473b680426bca05ec888698","sha512":"191056f4541b020f17e6199f076baa986994733fa229eddc9e84307448cc857f8fe51b683e1d3d25a96b6250669fd574d3d1618698c579255fe0796fac061d78","ssdeep":"","tlshash":"7a41f055d26e497cec0093fc2baef43ad50b69e92204859d87212c93e0b0c4e887fdd7","first_seen":"2025-04-27T12:34:58.437802Z","last_seen":"2025-08-09T19:45:58.395391Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1031,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1031,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/m7.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/m7.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jun 2023 16:33:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64932668-154f3\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87283,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"9456c30b0bbac4d2139ecb05cfd5c803","sha1":"0ef46a1bc326d7b32791f0edc27f7fe2ead0f969","sha256":"8caff0e6086738c9e220e5ceff7f201090906340dfe44e1d7b18751312cc9a58","sha512":"5b20440c02e179e45cc0d053906af66536c2a449cee9da829223a10acfcf1d579526a28063767f685f65ea9bbfcd0100ced42ba5435e83b38bf614279ecf27c3","ssdeep":"1536:KT8O1zfhG6gXY/e8xEW6Lro4F0JdWXyEwAIJT45WAX90HGyl6qVmO:TO1zfs648Spfo4F0f1EOKWE+hlPD","tlshash":"e583f11ea30f9eeac191cebe12276bba85d01077a15c525b060a150fcd29cfe8d3f45d","first_seen":"2025-04-27T12:34:58.483013Z","last_seen":"2025-08-09T19:45:58.366896Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1019,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1019,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=adausdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=adausdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:46 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3588,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"9a5ba473cb77660ec4846641488d9a9e","sha1":"e5d77a46d768504375db289cf885260d40af589d","sha256":"c0e5e433eabf94b8e2657d1d20a99a7466f7354078d74c9b6174324c32517bfc","sha512":"a04712ebe41d606b95f0a826de926fdb4065cf1449dc9cdc5036f369e9e27747e6ab6f544c0797faf64bdf1f0fe7966c260c76bc15e27aa3a65efca7e68561ba","ssdeep":"","tlshash":"1f719c7c42fef891281c6941155817e9ea4f08e38b2f3cfd38267ce0d6105775ea594e","first_seen":"2025-08-09T19:44:58.597555Z","last_seen":"2025-08-09T19:45:58.268173Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7845,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7845,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_chz","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_chz HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"78528cb57885786b4595da7ab46fa54e","sha1":"77930f681d9f6b4ac1085d85725069e3cb828bbc","sha256":"84f53ed5a9be00793c36fd6a7967635ae98e0fa4c86b4526355c197d5b26315f","sha512":"4b498d9ee531adeae21d0c254c1f1a6aeec4a859ad6e064ace6ef4010743209f71fccb17a72bc26289c08b29645358a071dcd54309ac14b5e18c63d78b8ecc2e","ssdeep":"","tlshash":"ded0a7f43e78052684b9bbd379f917bb68bdd898d08517065abdce3225dc10db10ac19","first_seen":"2025-08-09T19:44:58.598884Z","last_seen":"2025-08-09T19:45:15.715469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5976,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5976,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Home/static/css/base.css","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Home/static/css/base.css HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-64a5\"\r\nexpires: Sun, 10 Aug 2025 07:39:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25765,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (846)","md5":"8739b7f6cc1db5ea89afe0a14afacd7a","sha1":"f7dc32e9b67f5a0190cdb0d641f141294522fe46","sha256":"446377cfd8abce9140615cc2df1cfd3c2e8f908f179cbe1c7bc6209ef1bd2f3e","sha512":"8daa0f9ebd76dc9e94f4c5cf0acd3380b91abe7186648e41574d747c9cd0bfc2a6c28ba80c0e34ce2aba079782d9061d73bb37010cd77f7f59bc5879a19612a6","ssdeep":"384:BpFiOVTjRmNi2RoLy6IbRiWc2FDwFxYorvRnEkEZ58s8BXR8G8LrB888t7jL5ZBe:Y4cN39FDwFx9EZS9YzqtRB8TF3MDdu","tlshash":"12c295a7dfa30901b81bc5a41ff9ab55236c8017910bdebd7fc53648cf462d898a27c6","first_seen":"2023-06-09T02:38:16Z","last_seen":"2026-07-28T19:23:40.848946Z","times_seen":2269,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/notice.svg","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/notice.svg HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 950\r\nlast-modified: Fri, 29 Dec 2023 13:32:49 GMT\r\netag: \"658eca81-3b6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":950,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b33c387397f8b3763eb0cd4fce519d76","sha1":"33b8266a16126761f22be311f209ab8b8ed89959","sha256":"b5447fd53f73c3e45622222fa64fc111b0bc952f70a4f3c243264f272a4c560a","sha512":"5ac0820cb5f2d0c1b3201e353b715508bd61760ce4344e0af89aa1a929294154d5cfb80c8880789c0f3088e3bb24deefa44b1e516417a387cceaa8ac00d3e6bc","ssdeep":"","tlshash":"d4117ab584e4c958446b1fb8df37e5f5a5046d3e6d86014176f55b3127204bacc0fbc4","first_seen":"2024-12-24T17:17:56.672638Z","last_seen":"2025-08-09T19:45:58.360037Z","times_seen":25,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/ada.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/ada.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 May 2023 07:53:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64536462-13dc\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5084,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"3c630d48e25b4f76cb67e3f9b29a1840","sha1":"21ff7adeae4705a1b0ecb571f5fa98b5aa9da916","sha256":"ac43f42d0252a1d32196142ede6fd9a0b18f009f6bebd2255a2e493737d92058","sha512":"d7dd64616a88e4f53e4bea6b6a7e2fbbb3e6d2cc6a8f312244146f72e017c7465e0133c8ef73b14f714237cbb322b50f172d588ed7f617d16a35ab73ead6dcbf","ssdeep":"96:S4dRPCKnXlROlMKTVr34gY1vVutJSXc5he38/lBrc7Wx1U+uBCrba1:xn6aXDOlb2vVums5Ys/LruJCre1","tlshash":"a9a18e826c61b4d9b6428479134df5ac8d92c218ccd046dd7f87cd38ab101e8ca1e9ab","first_seen":"2023-05-27T03:32:48Z","last_seen":"2026-07-28T19:23:40.856273Z","times_seen":287,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1039,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=bchusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=bchusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:43 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3296,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"0278099a1dca2b1036654f98dec800e6","sha1":"714b259eec48344cb819d62c9cf55d30c8d77299","sha256":"1c5203fc1ad58082e37a01a782b0a2bbe7ecc5ac378b2b0c948ccdd7787091fd","sha512":"86340e6d23abc83b92911995c039f03272ed4d10bfc518b8773fb1d86680c6e7b6947701088dbffa6e9c8fa99000ecc5c7dc39dbf04cd2e3330635c1e10940bd","ssdeep":"","tlshash":"d86156bc22f97996040c5d422608a7e8c9bf18e71f5f31fd799a71c5d6a0237ada0d0e","first_seen":"2025-08-09T19:44:58.60365Z","last_seen":"2025-08-09T19:45:58.352151Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4016,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4016,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/act6.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/act6.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 06 Jan 2025 07:11:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677b823a-4bbb2\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":310194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1060 x 506, 8-bit/color RGBA, non-interlaced","md5":"4d6539a9f89971caede132ce2f6b786a","sha1":"b0d4bff9859f4d8215f80e5a8895c3d1867e7bba","sha256":"f978231b428159a4f723474a3ae1f8253f1a42fe8a049fc3ac49ae683955b8c9","sha512":"0680186527e80b9b7df5f6ada3877b604980f38ba2e7c1bb6abe4ea336270bae33de2ab4dcbe40910a3683bf53f9ec4536449e1a428490fea44a63605d1d4f2c","ssdeep":"6144:LwZKck6wTFWRxKQyY+Nt+i8LTF/lNansFf/hGC7g2jG5:WKXTEGSBNLTFNNBFf/1U2C5","tlshash":"4564234031a8e0a72a6be102d43d6d9d3681a8e2763f45ebd42ed1076d76d8ff7600b8","first_seen":"2025-04-27T12:34:58.477754Z","last_seen":"2025-08-09T19:45:58.322601Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1057,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1057,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/more-icon.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/more-icon.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 251\r\nlast-modified: Thu, 22 Jun 2023 17:57:36 GMT\r\netag: \"64948b90-fb\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 13 x 20, 8-bit/color RGBA, non-interlaced","md5":"2752b8cb734815cf1a5594689f858ccf","sha1":"65b8d7de4f03aa73e690c412a9ddff0d78ff8ec7","sha256":"895d1acb3b8c4246b9991ccce2dd3e2a749333d9384bd74e976bd14aa100b912","sha512":"d4d28cfeb481036e5875c2872efbc26dcf06795df742e5f262f3afb966c7478683523ccb231deaf4a739ef1ee40498ec8a2ee19939684870d405901b09e53ada","ssdeep":"","tlshash":"80d097db0e087d7ed38a0bbfd42a3179b23d48bd0412960ccc068a243a20e30a54b7a2","first_seen":"2024-12-24T17:17:56.679798Z","last_seen":"2025-08-09T19:45:58.280112Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1033,"receive":992,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/get_base_config?ent_id=f9eafae76782464737869b970a24295d","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:41.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/get_base_config?ent_id=f9eafae76782464737869b970a24295d HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ooourteam.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 7\r\nreq-arrive-time: 1754768381642\r\nresp-start-time: 1754768381650\r\nx-envoy-upstream-service-time: 7\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 1069\r\nConnection: keep-alive\r\nDate: Sat, 09 Aug 2025 19:39:41 GMT\r\nEO-LOG-UUID: 3325092360761579015\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1069,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b4d3753ea630131184f2910a9ca2b34f","sha1":"b08bcfa9d4f486bab4422d35def90b6d666e3ba6","sha256":"70fbec31e44f6c77c155b226c931ba43203973fa3958d0edc4587d029da65f5b","sha512":"0316929dc5fde153d50124257e0746568b33f9cb6fdf677f1450403bc6a8aa83efbdc7362d6f1ce3aa20b99aa27265674d84aa91b535694c031cd37c5e21b759","ssdeep":"","tlshash":"6711eb80608a8e3997817b857ddbb816ca6d3493fcc83e01e7a4df1872df29c3213954","first_seen":"2025-04-27T12:34:58.461833Z","last_seen":"2025-08-09T19:45:58.336206Z","times_seen":5,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":137,"dns":92,"connect":19,"send":0,"wait":288,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=sdfssdsusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=sdfssdsusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:43 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-04T22:56:30.544215Z","times_seen":313902,"resource_available":true,"data":null}},"time_used":3996,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3996,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=xmrusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=xmrusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:45 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3290,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"1824b8db9d0f31033cde462c2df6abfd","sha1":"ac94b5ccbdc9da88ac7201f6eb18866e13a3088a","sha256":"37031de027a8e6b0747b221a7764250da8e378041cb0e338b2a521c9a6eae555","sha512":"70e9b9e4a7c3d36964a73bba9883a507128f642c6ac74dd183fdf534587d22be117a8684d0eae1e9603a66b659d523afe0dec0ea2eafaa3dd421c6265ffb9d41","ssdeep":"","tlshash":"8961587c02f8b8c6150c1d41694867e8d97f08e70b2f35fdb59ab6d2da2023b9c91e4e","first_seen":"2025-08-09T19:44:58.607204Z","last_seen":"2025-08-09T19:45:58.29149Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7836,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_eos","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:47.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_eos HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-08-03T02:44:22.624109Z","times_seen":351,"resource_available":false,"data":null}},"time_used":4968,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4968,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"edbb-Du3MPQ7GnRobCfGvnAP4Uqb5QVI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\nage: 1547573\r\nx-served-by: cache-fra-etou8220059-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 8017\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60859,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-08-03T19:43:41.17992Z","times_seen":15173,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":80,"dns":63,"connect":13,"send":0,"wait":14,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/dash.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/dash.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 May 2023 07:53:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64536462-e44\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3652,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"d9ae624ec75f54e7a472e706c50f6171","sha1":"8f1595d2790ab5212dad31ae8e825929abf4b90c","sha256":"b064ad396c5b7bc48b0a1c14743d779d468486fddfd41fee9a740f7a416f89b9","sha512":"9d887e629e815f75cea198674023d507e52245932594bff5be082e1b535fae19f4dcdf6c54cb72bef6bdcbac605df7deb0662b365213c498033693c62f798902","ssdeep":"","tlshash":"35716d29ad337c98fca805e1d283a01ac97b653ac04d9dd353ed753b404a058a7c768f","first_seen":"2024-10-23T13:33:33.371625Z","last_seen":"2026-07-28T19:23:40.856852Z","times_seen":233,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1035,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/bootstrap5Slide/scripts.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/scripts.js HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 298\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\netag: \"62c3214c-12a\"\r\nexpires: Sun, 10 Aug 2025 07:39:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":298,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"48477ea73f8709a6c29d7cde0cc83e55","sha1":"5dc30fab107725dd71ab343d70b9e6267ea68cf1","sha256":"fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a","sha512":"0932287b99d7c96929e7464b6684fe399dfcaaea787dcab28fa0879094b5eb4d92139260fecde4ffe430eca3986430f98a72fc523332c4e476bee9ea2226b1b3","ssdeep":"","tlshash":"1ee0cd91761d4f9d1ccc3257996092c576841524e401f06790374c6c0a9584225fb7fc","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-08-03T02:44:22.652838Z","times_seen":6173,"resource_available":true,"data":null}},"time_used":1256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1006,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=chzusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=chzusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:47 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3590,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"1c5d86680b87e1b959353a7897c5f6b6","sha1":"cdb479a04847475b834ec1c1b7ceb1e594b31b36","sha256":"e542763024cbe3f4777b7ed3544d34bed415a505bcdd40f10a1906e89b55496d","sha512":"44581c973d03b68f42308a4d933b979874427d7d68208827bbabe80e9636e5540c627e44358f82a8a76f663662b0aac58f044b814bbba4a051bd24dfdcd50e57","ssdeep":"","tlshash":"4871e3fc42b87852141c6b01195827ead58f09e3071f3dfd3abafde0e6605768ea584e","first_seen":"2025-08-09T19:44:58.611144Z","last_seen":"2025-08-09T19:45:58.362785Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7851,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7851,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_eth","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:48.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_eth HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3a104d31598cdecc8abb8179f4501e78","sha1":"7278d147bd8d097b88597ba1d071ec1e1d670dfa","sha256":"eb8c361702415f08b82cd0b7c49728feb9bcc43943967c7bbfdde7597d5cecba","sha512":"a1790027cdc078d56c7ab06b9d4f9d096ae26e0c5e36dde37884ad34aa814388cebdfd675798251a6d2b0b26513bfed2adae79ed272c726f6e1d6bfe98b37b0e","ssdeep":"","tlshash":"60d0a7f46e794d15057167d2b8e91f7a786ec040808103c5dabdcfb23ae821cb6d6c75","first_seen":"2025-08-09T19:44:58.612697Z","last_seen":"2025-08-09T19:44:58.612697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/eos.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/eos.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 May 2023 07:53:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64536463-1303\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4867,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"eb04b19eb0c3db1f3d6bec27eed20eee","sha1":"fc87201ac4f926ad5658dd8385445c6ff87dd1ce","sha256":"6d8b5820cea097b5fae118fdd13c32312d52cd2dc427fde168d497b6778999ac","sha512":"b8655abdf6948ba9cc6ad03c11496270d45742a1706aaa2a40ad4b21b5017546223bc1968e03c0540ae6e93ae9930666e718ed196a60c39bb496eb6e67e4adb9","ssdeep":"96:mn1pO/IU1xoP55a88BmRj72v/CNj1b/zPdFw+qGcXTftEy+2duIu:rj1oa88223CNdwDftEyUIu","tlshash":"e0a18e815872cc389853eeb54b821dc98fa219f95d714906cfaf438c9f3d72396c5436","first_seen":"2024-08-19T17:34:28.547856Z","last_seen":"2026-01-13T23:54:23.786065Z","times_seen":222,"resource_available":false,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1040,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/step1.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/step1.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 29 Dec 2023 15:01:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"658edf54-3558\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13656,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1184 x 704, 8-bit colormap, non-interlaced","md5":"b38be24c8d85b8d39fe4d33a9011c29f","sha1":"56e524d8b3ec55cb0160c0526462cbbc365f9a64","sha256":"cc91df12383f6723a905fefb7963b2a87ccf71533b244d2bc2a5a9b3d4549134","sha512":"3e0959e003b053e969a16742080cbf4c0e264093793628dcd5b4900a9c8b7258d889140b7db20f13e0244856b336655e9d6ad7016ac363e571aece94a981d3d8","ssdeep":"384:aTbo8xC3pW9J7FXx9Wa+uhE0bdEkDxnFu0aEssp:aIr5s5lthESd/ngdEV","tlshash":"be52be536d522f0ee78ca7712e0d4b0754271e0b6a4db9fe618fe8b1712c90e80e66d3","first_seen":"2024-12-24T17:17:56.720073Z","last_seen":"2025-08-09T19:45:58.255767Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1029,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Home/static/js/layer/layer.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-4d83\"\r\nexpires: Sun, 10 Aug 2025 07:39:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-08-04T16:10:31.065575Z","times_seen":14216,"resource_available":true,"data":null}},"time_used":1009,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1009,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=uniusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=uniusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:46 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3311,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"148442e6e92b03fbf2a3ea827ab2d3d6","sha1":"d541935b3713f953d2d23c678c083870326dad89","sha256":"f4e5ce4fc5bca057a3dcfc7a49d0d201405a95d9a49515dfdf0adf0285879662","sha512":"e4e29b2eff1f57f23c15855080524b64a03636dd2f3bb366ce32c7923d99f746b62f1a5457db7e38a02acec897b2c0ec5e0652899ce9f94ada10cfc229b27b7e","ssdeep":"","tlshash":"7d6198bc22fc3896260da90649592bedd48f18eb1f0f35fe796a30c0d6109379d89c5e","first_seen":"2025-08-09T19:44:58.61611Z","last_seen":"2025-08-09T19:45:58.326304Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7883,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=pepeusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=pepeusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:45 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4112,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"e890dd88f7cc06f67273de0cc029f776","sha1":"a471870372b5aab94bc7a359a25805b08fc097a4","sha256":"ce556bc073ad7e9bfae25a8edc0e6d246951e861563101da379375105001ab08","sha512":"6007568f456f5f78fc2063bc4f72ebed2a365731099710861c248b3700bc07835486c25895eb1207199619766da9a09b36db7f0f86d10855e8a624e0a81faafd","ssdeep":"48:ZSCHNbaq7DprJzEEgRfAWp/K8v9zgKpTGCfVbn7SDZdMj54XX:Z3x79VYz8c9DVz7oAjGn","tlshash":"4a81107a02fb7546310dd896283826dbe95f68eb2f0f30fd726275c4da25432cd8466e","first_seen":"2025-08-09T19:44:58.617585Z","last_seen":"2025-08-09T19:45:58.249678Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6035,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_dash","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_dash HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7fdc4d7dc85d8753cf0fd2d72bbeaa35","sha1":"544f52fa2988bd31d9554464595fb5e0fb6e4e1d","sha256":"9c70419237bf29da5546b29ca31341ea890057e08f35884399d40433cab52f74","sha512":"23b2eff0507f7722014c145e4731d9912ee6c7c36eaacc8964cfb7312187c20d5d28b18a7f52e3397bc6fb7e3c927d019d9b17e26d3981c810292a5efa674b75","ssdeep":"","tlshash":"e3d0a7f4bd39041916b19bd1a8f62f7d198c8445c4d4465997ffcb712a6c30d7126c16","first_seen":"2025-08-09T19:44:58.620224Z","last_seen":"2025-08-09T19:45:15.651511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7798,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/nav5-5.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/nav5-5.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 473\r\nlast-modified: Thu, 22 Jun 2023 15:43:59 GMT\r\netag: \"64946c3f-1d9\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"3e9758642d8bcb2e8a60641dcb0b2bb6","sha1":"c8cc82853464c7cd8ec399af3738f4e3c4b79c11","sha256":"dc1c679108716d50f9d8889e10d3f17b05ad82e4e5461cfcdc287a756390f77e","sha512":"f12b5eaa124681dff7affd01b25baaa8f105acfcb7ecdce306de57a7011b8fd180cf16b1135ba2947f223db827adafea07536ae20690c05557b8479b03344a08","ssdeep":"","tlshash":"dcf05ceda310effbc9586d18a00f082278ff0baf5b42c0c9240a2c2ae303d745890d0b","first_seen":"2024-07-03T05:01:40Z","last_seen":"2025-08-09T19:45:58.385069Z","times_seen":206,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Home/static/imgs/hot-2.svg","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Home/static/imgs/hot-2.svg HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-1ade\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6878,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd9279cfb541640afabd1d33527f1df4","sha1":"6d828472cfaa863044b92e5c884ea8d658df4d36","sha256":"6466ed8936ba729058d7e2ae3bc93a7d8f3fb8ec385d7e3c29f21968cbd5aaef","sha512":"53a3ddf98f9ea97b18e73e5ca308a452a16142e672dcf3d1c86e61cc83e94729651eb41301bc902cc2510178e0c708fb5b66f3bf1e4ccde0fcf5f61aff77fcf5","ssdeep":"96:QRslJ3A7/H2wd9Qci3A7/H2wd9Qccra97a9tx+duKNBBbNwKDNlUs7vkSqD:QWS/Zd9z/Zd9ia97a9tKblLs","tlshash":"96e197f7e1b8b993d246c771ed52485528aa84fbeb810391c2e8ff9a6135cc04c4edd4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-08-03T02:44:22.699192Z","times_seen":5116,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/XRP.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/XRP.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 May 2023 13:56:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6453b971-f61\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3937,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"7f4feb23b128c1683aa4bc450a625aa4","sha1":"4c022a2d5fd79660e39f614b0df8ce8bce9bcd90","sha256":"9b749ac3ebc1d5d7efb452e30695a43e340bafe8864abc48af63a548f607fddc","sha512":"e456437862ad7a67dbb471d853f738191e3f0fa372c87ac14e0e362270b8dce3b574b9302b9c33e4584eca98a8525490ef16b9442bf7cbff467fd361a9a345ae","ssdeep":"","tlshash":"7b813d97ef90cf2c66e7b7758baf5c45f4613820e0d7d1cc441a19a4618a693c9f2378","first_seen":"2023-09-30T09:31:08Z","last_seen":"2026-07-28T19:23:40.839116Z","times_seen":277,"resource_available":false,"data":null}},"time_used":1050,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1050,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/create2.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/create2.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jun 2023 16:34:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"649326b3-1fde\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8158,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"7f1caeab0a5a7a18fa68f3afd423b774","sha1":"c8c335b1fa8dffec100b88df4ba110b9f9792a70","sha256":"39fa36d97cef176e2446233fc9c3effba1bd258404333876638c84b8336159e1","sha512":"f6593e1ba1784a733d15b10189451d7f51d3dac0f5fd42fba79ae4fd0a4d488ca4e648b9446e1398b2c78fe4526afcf4cefdda948079f23cf2fba7af168867da","ssdeep":"192:ELuiNnUiNOGIVDT39cYWTZsiFc9dl9ZvZNd:avhdxIdNcZeiMdl9Zv7d","tlshash":"76f1bfab4b653da2a489c861107e7d021e43f2437c8d58e874044afbb712d84a3dfac9","first_seen":"2025-04-27T12:34:58.509316Z","last_seen":"2025-08-09T19:45:58.350678Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1014,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.4.197.prod.20250731_156/893.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"38.175.44.17","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.4.197.prod.20250731_156/893.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 19:39:42 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: AliyunOSS\r\nx-oss-request-id: 688B0AC87D696335394C2153\r\nAccept-Ranges: bytes\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4275741097519211760\r\nx-oss-storage-class: Standard\r\nContent-MD5: cscRrfCAJRyAx5+sIdSJcQ==\r\nx-oss-server-time: 5\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nX-Ser: i28361_c15259, i2435101_c27847, i1940273_c22701, i1979063_c23797\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET\r\nContent-Disposition: inline\r\nAli-Tproxy-Dns-Update: sync\r\nStrict-Transport-Security: max-age=5184000;includeSubdomains\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15936,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15936), with no line terminators","md5":"72c711adf080251c80c79fac21d48971","sha1":"8460ed7d7836055f48d16714f7d132e9ce25a4e3","sha256":"8309b46f75e4d7f6e77a82cce81e76e59d0c5bb863f85729a9f48b7ae09d579b","sha512":"c7e001fbaa8a55c0a728781e1a67fbdbf32ff1089951c96656c5f67749286742a3073c33bb0eccd1088ded0065a1d91581af03df3885eb5b035470bebe96b701","ssdeep":"192:aCde4ambIiV1F/+RARv0973EVnRupG4tCjUldLuh0j/yyKbA3wN4d:ddxbIiV1tZRb8GWdJ3uQwNe","tlshash":"686284a5b4d0b40f2b9710a2503f2505b227bc2cf18e75a4d7e0d5f766fa1ce5026b2b","first_seen":"2024-11-12T14:18:43.637446Z","last_seen":"2026-06-06T22:09:39.355662Z","times_seen":1649,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/nav3-3.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/nav3-3.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 767\r\nlast-modified: Thu, 22 Jun 2023 15:43:56 GMT\r\netag: \"64946c3c-2ff\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":767,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"fb528409f95c1797b6613dc3054b2746","sha1":"20dc962b2bd070ae034fda2413f0140bb4aac018","sha256":"bc1039857ded330b0cec4cb778144c2250e47913632c0cb664a0e07486a79826","sha512":"ec6101ca48635f911a56c5fa9c8e4adf8ee97a3d15b9e6044eddf422376bdfb19e197e4c6654fea43b32822a5fccfe734bf6b2d2aeed062061092c27328842ad","ssdeep":"","tlshash":"d701b5c1940ebc17229a7e2b10c322239db2b0f6e902cb7416458848c72b02010279b8","first_seen":"2024-07-03T05:01:40Z","last_seen":"2025-08-09T19:45:58.38602Z","times_seen":207,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/act2.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/act2.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Feb 2024 07:38:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d3058f-127f6\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75766,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 856 x 400, 8-bit/color RGBA, non-interlaced","md5":"abed3012b8f6b13532aa96a7198d0554","sha1":"a9f857894811986b590912a30bcb3bfcb0c2cb9f","sha256":"897003d1c8fec571d14be18a954880e789de9e2a12d828659525f251426056fd","sha512":"3028c9927f69b6cc650890bd328d1d58b5fa1f1537a8f45225e66610a0af30c5d1d4ec7e1a00f9ed985c78fe36372b2c060efa49d17ad965b611dffc27cab3aa","ssdeep":"1536:2GZb+EfXWP+8HbqUVhQugKJ7Ru/bhLCHDYj0kg3mHQQ4vXhXAtU:2qb+EfpOLEuP6bhL2YjV7QBfhXA6","tlshash":"9e73125d46fa78498a850c770ed5629213998ff704c103ad735ab02d1b90ebb9fb923f","first_seen":"2025-04-27T12:34:58.520125Z","last_seen":"2025-08-09T19:45:58.254756Z","times_seen":5,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/pepe.jpg","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/pepe.jpg HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 09 Jan 2025 01:48:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677f2af8-20fc\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8444,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 200x200, components 3","md5":"69c9b5ec10bbca720884c7fb85dd798d","sha1":"3770b5ac98e9c5d4a339787cfed967f3efef92b7","sha256":"e625b75bb6088c234e4156a0422528de24db0f425dd20de1924f0356a7cb4d85","sha512":"ea0e9713118db4a667da49a9f14dd3411fe2a58bfeea89cec97aa4f30003c409da2ebca6a479b608b9cde00003d31a238b7c36ff79fb4bc67f5fcb437298f524","ssdeep":"192:IqUGt1ryJ3TcXnMDOSJ8pjaWgHRdqIYLZKmnZmiBqaMi7w17BmqjZ8N/ASGP:IqUG7q3gcDOSJ8H//ZxkaMi81/UIlP","tlshash":"cf029e4f2422e240f87d273a9bf52673fe8132e83580b1aa5255384c8f3b4a2434dbcd","first_seen":"2025-04-27T12:34:58.490867Z","last_seen":"2025-08-09T19:45:58.323372Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1043,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1043,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/dot.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/dot.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 May 2023 07:53:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64536463-11a0\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4512,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"9b80e332192b4501a7b2ea68cf81877d","sha1":"bd8c43b0e1efb07078383c223e36b044a84b9d68","sha256":"94c64a23926f16b8764163bb4bf4298ba5c81adbce05805874771b4935d7dda0","sha512":"618fd24497594ef2e20d482f9db8611bf4b5b7d79f48d9a4ac234a9f6b74a93bc284f45a4461fd6b403317d04f04361b6a3dcbc9cb729f5f0003d08f433eb9bc","ssdeep":"96:jeqJYPZyhFnZLOSpJ1ccOm358VK3Fs8SMBKWTvI+FYHEuRB:jUsZlpJ2lA5HBlvI+CLB","tlshash":"69915c2fa5084527feabcf354e30b1086710ac52d9446e1db93aea7fb05e46b2cd3004","first_seen":"2024-10-23T13:33:33.425393Z","last_seen":"2026-07-28T19:23:40.866316Z","times_seen":259,"resource_available":false,"data":null}},"time_used":1037,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1037,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Home/static/js/echarts/echarts.min.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Home/static/js/echarts/echarts.min.js HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-aca3b\"\r\nexpires: Sun, 10 Aug 2025 07:39:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":707131,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"1b6514abb0e411dcb332c25de3306f8c","sha1":"fa15bc12002d77ea96202dea9a5b11903ee8c415","sha256":"a28aebd5961c57d2491bab230de0a6c45c0c6fa766ccbad2bc7c6c0d3df7e5e1","sha512":"bfd34e922b6db77218fea3e9921f33eae91e2d1635164752c60f355a42431b903cd2ab3eccf5b7d7495d664d0088c173b91de0bf2ea3b310accc4b70a264de3f","ssdeep":"12288:NSwmn069ftGyWNm6QY2u5KTD3zfsXzFDtdmNbY:Qwmn069ftgNvMD3zUXzFDtdJ","tlshash":"b0e4f9ad7244742642e73174047f150b92362849b50b8698fb6ad8dabcbc58f327bf7c","first_seen":"2023-08-27T21:18:26Z","last_seen":"2026-05-02T04:45:33.869552Z","times_seen":18,"resource_available":true,"data":null}},"time_used":1011,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1011,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=eosusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=eosusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-04T22:56:30.544215Z","times_seen":313902,"resource_available":true,"data":null}},"time_used":6015,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6015,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/nav4-4.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/nav4-4.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 460\r\nlast-modified: Thu, 22 Jun 2023 15:43:58 GMT\r\netag: \"64946c3e-1cc\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"f4bd712d6f96c325700ec6ff5e9a6ebd","sha1":"91f3b733bb5c9f2c5e9861c4591df52d9d950ccd","sha256":"e0cec2b653ab380d5a82a1be7e6a5a5e9cdb6e359395b6ea95fa9ee93e2069d9","sha512":"b943dc8d39efa361ccf6fcf8f757610019d92edce94834e4c91f76e2d55fd8ca0381426955a31294e2a4a114408bc99931ea3a071294910d4fd3414ccdef23db","ssdeep":"","tlshash":"55f0dcf91282ee7a89cb46a43d973cd37e3354813b3215542cf94520d4066b5b944696","first_seen":"2024-07-03T05:01:40Z","last_seen":"2025-08-09T19:45:58.35286Z","times_seen":206,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/act1.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/act1.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Feb 2024 07:38:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d3058e-1714c\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94540,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 856 x 400, 8-bit/color RGBA, non-interlaced","md5":"1af3be9cae8e94d5aeb651bd3e7aaf3a","sha1":"18e5b873b5476b2cb56463d0328717d6e9abd542","sha256":"01db0f7019f57b81894d127144743065546a84a6662b1e8030528355ee1bb74c","sha512":"d35c05823b4e7b5eb67ff5856ba55317f45fd40ea027c0d429afd8083be5f6009b4f00dbfe3b535ceebac84414c201f4a91a2a211a6880aad9f13ad7e0146a93","ssdeep":"1536:V6iahpB3avKaPEkXHCtfbn1gMWHMQLEUuCutY7L9JRsZSuuUxLjOE3XP8SQdGZuj:V6BLM9dCVnmMM3gUAtkLbWxd3XPgkZuj","tlshash":"8893120e3f93d78e3a36e6276b2e8f5410d25826637445ca5f384ac71317562acdd329","first_seen":"2025-04-27T12:34:58.42083Z","last_seen":"2025-08-09T19:45:58.330388Z","times_seen":5,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":750,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/act5.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/act5.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Feb 2024 07:38:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d30591-199f9\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 856 x 400, 8-bit/color RGBA, non-interlaced","md5":"40ecc4803d41b7bbb0f77e4382d90e7b","sha1":"ec9c8f38fd14a8b8c27b9bc74999ca30e5b0df4d","sha256":"d02c51a10817d103de8798856291937ff35d4d9f06fd674c8e263c0db9787ea0","sha512":"00f64872549f56eea2274eff82666002bace8c69f4150725d004ac8b829903ae6681907446c5eb307d7ae7f314d8a560438bfbd25c328585f21d74abb3a41833","ssdeep":"3072:2VAvUMWyuX57KJqWKM5OVpenZb0Wd7IrRxk:2asMWyQ5JRMaYZLd7Ir7k","tlshash":"96a3013c9c3b055e089de78e2f8180f106a7725e30bdda9cec099c6d94476dd469aa3b","first_seen":"2025-04-27T12:34:58.441397Z","last_seen":"2025-08-09T19:45:58.262415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1058,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1058,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/product2.svg","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/product2.svg HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 910\r\nlast-modified: Fri, 29 Dec 2023 14:42:49 GMT\r\netag: \"658edae9-38e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":910,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35b719b54626bb526a17970f24ff9189","sha1":"0d34d853f48e5e72a341b814997b35fb2ca96a5c","sha256":"29a0d7a6bf3b249c2490a43abd8c51f17cc01a089d8ebfa826ff0029f31aeb0a","sha512":"d90d0ca4336c6f396e2bec875867b20410c18c9c3f5a473a13987139ae98ffaa3ae21e02cbe47dddf4a27a419a8f165eb30ec4c161aa69b43d2a9184addef53d","ssdeep":"","tlshash":"fb117665a7ec1204e8106bb6b678f06470af38e87b950ec5d5627e56343248ecd3e8c6","first_seen":"2024-12-24T17:17:56.682675Z","last_seen":"2025-08-09T19:45:58.338345Z","times_seen":25,"resource_available":false,"data":null}},"time_used":2023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1031,"receive":992,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/SPOT1.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/SPOT1.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jun 2023 16:34:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6493269f-2f74\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 224, 8-bit/color RGBA, non-interlaced","md5":"fc0a2c39a2f45fb5b7c40094dda6d224","sha1":"10e192db76d96a37a7a78441d85c50efaf0454af","sha256":"8ca9b7630d5e91181bf1a06f96ae02a7652f923c6e658429c8e16946e3f35842","sha512":"ce9f6f557a698a596a39d03eb1c246f68f163210edf3cf284a0324b3b260659f419f53d8193786247e1a8bb1f4521d48e3ce7387f8c9888d43ef45459def9c17","ssdeep":"192:BLzinagdBz2EshlwRC5U2l8DUyrxPkt13KWgkPR30LpJx/aOYuQWoG/4Evlo3WIh:BLzGagf2psRC5Rl8DvSXavo0LZaOeWTA","tlshash":"9042c0fa46b0019534976230270c1043bd8333bc7a4d9295cdfb6adcc46beebda15796","first_seen":"2025-04-27T12:34:58.411037Z","last_seen":"2025-08-09T19:45:58.345847Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1024,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=balusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=balusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:47 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3286,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"f17285d6b6e5670a4283207bf2445ebc","sha1":"86fe16a560c8f8431cdcc1bb46238915bea0ca12","sha256":"b2af57c0b70169174ecac34492f0d24b2f5afc0784d38824bf57be20371acf5f","sha512":"048ad537b9756ad8b26691633cbd1ec5b541f9c4de2ac0d215467a4b6a7e86099147fc04f475dd1e8dd1c06770bbe34b902a53f8221648483428be0074c20af7","ssdeep":"","tlshash":"376148be43f87691151c284528482beef48f98eb1f1f38fd786a7ac1c6110379c9680e","first_seen":"2025-08-09T19:44:58.646235Z","last_seen":"2025-08-09T19:45:58.357941Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9973,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=ltcusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=ltcusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:46 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3173,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"6350367974410edb9ba1ff8c3763f9a2","sha1":"70be951c8ff55e607a73e42a1b537ed8667df175","sha256":"6adbe569f22c181ba3a15ac28c36d1c1ac5ec5b192b5d5229cee4b72af133e42","sha512":"aa16da9a10668d97e83da23977b06a4f471e2df876f0d4f0e609dbb88cde1ad301c2368bd3fdf1db997a847fa275617f35fb459ade18879acecf2502104bec36","ssdeep":"","tlshash":"1761357c42f83a46000e6d1561487be9c85f18e72f6f32fdb961b1d1e660ab79d90c0e","first_seen":"2025-08-09T19:44:58.648303Z","last_seen":"2025-08-09T19:45:58.247314Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7882,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7882,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-09T19:39:35.969Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T22:58:19.341154Z","times_seen":17714633,"resource_available":true,"data":null}},"time_used":853,"timings":{"blocked":0,"dns":319,"connect":262,"send":0,"wait":0,"receive":0,"ssl":270},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/ls.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/ls.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Feb 2024 07:37:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d30548-26de\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9950,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 160, 8-bit/color RGBA, non-interlaced","md5":"5b94f9df07b1a0141fe0b14f7cb10bda","sha1":"1918f79e70b159e8479dab5b248f59b5f4e2f6bb","sha256":"438cfb6516063e8e300aa7c769d8a7a35a99021846f4237be2a9633c1f08b3cc","sha512":"c1a5015c61d24c92b80886dd21f9367ba50fe1a668d8df32d1976088717eb94534ad37f8432301f06b95c4ddf3df99cf69c385ef8169ad3e9c59aa34d88ed5e7","ssdeep":"192:kSdCC8hcEIIF+NvEMVhO+R41QCcdxNBDUm6wvd0mD+gkfJNiU7ACCCT:jdCC8eHIIRVJKBGxnAE10mSgkfMCCCT","tlshash":"44228eebfd1303039225c00d7c109b7e842a6ad7ff44a834edd1e919e1a15777689e6b","first_seen":"2024-09-19T22:50:47.443127Z","last_seen":"2025-08-09T19:45:58.372225Z","times_seen":8,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/topClass.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/topClass.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jun 2023 16:34:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"649326a6-13c06\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80902,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 708, 8-bit/color RGBA, non-interlaced","md5":"744d5b640cd455692774369b71e45b1b","sha1":"983ac6c2117621b4fc92c76dafce027937ddf612","sha256":"0849a65a8aea9fa3c6487f1ba60a42858aa6aad90fa3eb99bef2376336903ade","sha512":"9524e6e62e97fba6e047345bef76df4942df20c953d8d6648ac03e8fd4e3a784cbbf1c66857743c62b6c55727cfa6821f91987255a8fe8db0477120583c96484","ssdeep":"1536:EJ3iSVX9x4D5eovar/Cvn3s6DSmj1UlH7WeIdpYSKTDnoImy4oh9:MVA9e4hvn3s6DSWcbEKSKTDn/my4G9","tlshash":"6b8302c8f0081627e03622182d99dd7250d72e954e58c483a39fd46d88b1bbeeed9fb5","first_seen":"2024-08-19T23:29:56.987967Z","last_seen":"2025-08-09T19:45:58.37844Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1025,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"camorope-client-a.meiqia.com/push/info?browser_id=c67533787c5f7abff9abc5683abe85f8\u0026ent_id=456256\u0026track_id=31419udXiDjnuxpQ2KQ6HZu1OfI\u0026visit_id=31419wXXbUZ2Ktklo3vxNmH5ySa\u0026t=1754768382456","fqdn":"camorope-client-a.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /push/info?browser_id=c67533787c5f7abff9abc5683abe85f8\u0026ent_id=456256\u0026track_id=31419udXiDjnuxpQ2KQ6HZu1OfI\u0026visit_id=31419wXXbUZ2Ktklo3vxNmH5ySa\u0026t=1754768382456 HTTP/1.1\r\nHost: camorope-client-a.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ooourteam.com\r\ncontent-type: application/json; charset=UTF-8\r\nserver: istio-envoy\r\nreq-cost-time: 2\r\nreq-arrive-time: 1754768383020\r\nresp-start-time: 1754768383023\r\nx-envoy-upstream-service-time: 2\r\naccess-control-expose-headers: *\r\nCache-Control: must-revalidate, no-transform, no-cache, no-store, max-age=0\r\nContent-Length: 77\r\nConnection: keep-alive\r\nDate: Sat, 09 Aug 2025 19:39:42 GMT\r\nEO-LOG-UUID: 10225376518361507860\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e6fc70486d9859a282732bb12261b3c2","sha1":"3ee5756f62729572632ad7ebddd22d7d5672a048","sha256":"41a18d0ceee3f648eed2452b251553c189ceaa07a897e4cf5f62dcc49c6f674a","sha512":"3433ab324ea46a586826ec99e91ed35cb8c02da60751cfc517345fe94015558f26419ef65256aee7c7763b162700ef4db897b6a380e1a8d804ca950f44901867","ssdeep":"","tlshash":"83a0240dd43f305c4c040f0003003d074c1c04f7014173f5131cf55c05d10314010147","first_seen":"2025-08-09T19:44:58.654843Z","last_seen":"2025-08-09T19:44:58.654843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1021,"timings":{"blocked":325,"dns":285,"connect":19,"send":0,"wait":366,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Home/static/js/layer/skin/layer.css","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3214c-36e0\"\r\nexpires: Sun, 10 Aug 2025 07:39:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14048,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"1673a003559ea1607dd77e6467a4baed","sha1":"954f4afa17e3d1c057101e62950f6c9506245550","sha256":"9748f440829e0b76d70f344e9c989f6d2302eba81aeea03211d40ef5f29fe62a","sha512":"5f9b8254fe18cdc329ca87a4852b7cb5520dcf3c406c5b3d755e99d0e7ddd618cd5ca2b455868ae14d896431cea2252b60d79d5fdd9e404a1fb8685a05ceb955","ssdeep":"192:9OcW0PmLeWVNrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijV1JbTyGY5CGX","tlshash":"1c5202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:37:37.344268Z","last_seen":"2026-08-03T02:44:22.615907Z","times_seen":3284,"resource_available":false,"data":null}},"time_used":2435,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/trx.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/trx.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 May 2023 07:53:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64536463-1735\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5941,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"273ef6386ba9fa5f898cb287fc158b2a","sha1":"ca3836d219eec81150b468190f6464294f577acc","sha256":"7f169dcdd6e34e9107624b12b34d930f3c9e6dac99af40e5658d917070d23add","sha512":"199f641aef0c7476c655acfc42d23357898219c844424c611f92bc6591de05a74f8810955d0290440d18d729d4b8fc91e851fdcfb62e03dd09cf5e8fdced53ce","ssdeep":"96:evTBOSuvec7k5dzzcNMMDHrQ02VMpyD/qSjiq15njHDKOfALKHRqzH0DzgG8qzu5:0TB8odMTrzpybVjiq11jHW3QRqwDzpbC","tlshash":"ecc1bf3aa1d11b7b0acee31b430c8804d20ef253d225cd59c8af9065bed17e7406f813","first_seen":"2024-10-23T13:33:33.42136Z","last_seen":"2026-07-28T19:23:40.842778Z","times_seen":289,"resource_available":false,"data":null}},"time_used":1041,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1041,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/js/jquery.flexslider.js","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/js/jquery.flexslider.js HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Apr 2023 15:40:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"644a9760-e028\"\r\nexpires: Sun, 10 Aug 2025 07:39:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (325)","md5":"242034cacf5d08f9a4f4df40208f830b","sha1":"56cffde8b9ca0b7e3161714b786651ac2b87a953","sha256":"487639627bd943c11e40764b968904c921e505bb73f0ae5d7367c8c8ff84a526","sha512":"fcbb4ccb030b5d9dbd4c96c44de7387ba9dd4963f14034ddb2a0ae77ef10e08167290d56565afceebd03e68a3d40d3bdceea903490e6bd0c509afa9ef034582c","ssdeep":"768:oILMsh61e6anxUS1cdeAzMuwskDkg9iPFi2PU1SFzuLdu:kynN8P1PU1SFzuLdu","tlshash":"3043ff1a61b2166589a372ae2f5fdc14eaf78343901dc969fddd030cdf4442806b6bf9","first_seen":"2023-03-07T17:01:43Z","last_seen":"2026-08-04T20:38:14.30024Z","times_seen":828,"resource_available":true,"data":null}},"time_used":1007,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1007,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_uni","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_uni HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":261,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ffba456e07be3962fbc7d58ba510e8f1","sha1":"866e15dc4cdedd153d7ab1e9a7e4cb263f8c8de5","sha256":"bb0dd81439fe5fad630a953a2d8344b0a60f96ec9ee9a5b91a81f9b0daaa8eec","sha512":"0bc6f2dfa2348b8ad970408f0bd206b7c45244ea54a7e9097e370af8d1baae7da1a4f026712a2f7718ab743638a077480226d1be7ade35072f3b0d5f380f6544","ssdeep":"","tlshash":"15d02ee52d35022400b3b7e2b8ea532a586c8035c1c942015bbf8f286ddce08330dc22","first_seen":"2025-08-09T19:44:58.6601Z","last_seen":"2025-08-09T19:45:15.691289Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5978,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5978,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_shib","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:47.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_shib HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":254,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"95969a9af35115c6b843f2a92b2d163c","sha1":"1a8835d0f046119a466d072270d8725ceda432ff","sha256":"41c807cab019d0dbfa4e3405136675e0dc9887ee532190c8d2ae50efebc2eece","sha512":"4e268f9ae8fd2757fb4922faf1f086525a96613a49916557ab7cf92f63f77013ea531197fd73a6fb8387847fa76ca6e6e2c6268a8e6cddfd61469e48fa30e9a4","ssdeep":"","tlshash":"5bd02be0babd0915005257c12cf52f7f24ad8006914107157afece3155ec51af00ac36","first_seen":"2025-08-09T19:44:58.661675Z","last_seen":"2025-08-09T19:45:15.634933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4971,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4971,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/contact3.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/contact3.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 29 Dec 2023 15:23:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"658ee464-2ea4\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11940,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 668 x 305, 8-bit colormap, non-interlaced","md5":"13834b87fd45e4847c141921e84992ad","sha1":"7aa480a0236db6475229cd15bebcaaf12ae68098","sha256":"38e778c286a4274534786f65e3d15e2606b410f657942d34d3e60b2d51e1030c","sha512":"86f8410520ca0f19f42ecd1fa8cb2b3fd102ed69e4f276562e2168cc651f05e471c7d03d11038c77c14a7d3f4cb82954abd18355081c87e0cd18e2d87530d01c","ssdeep":"192:wEh2C+HkQSIZRUTg9NMmseLVpD2W2U4Q55ADZASarO51808OxLCmQIZ0ofl:YHkoL5fH2U4g4mSarO51RHLOofl","tlshash":"c132c02f9cc7185085b00a3cec8934795b2d9ea865b4d9c4f92f27317da6b427e1d0ce","first_seen":"2025-04-27T12:34:58.417655Z","last_seen":"2025-08-09T19:45:58.315145Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1025,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/create1.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/create1.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jun 2023 16:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"649326b1-27f3\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10227,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"ce8cd3a6dd4357d1c33b704c61f60b4e","sha1":"0d477891f9afc30b003441eb83cd2242cb7179bc","sha256":"e20881cf81c540e3389acfd1f77f5adfc1e6383a43ec9f33053c61114693a0ac","sha512":"e3eb69cf7c29d6e0a061e11f8aa7ef485e21272b12b0c34e7a749b190e7dc258aac955c27ac33bc9b0281a2c763772c68fca63ae226857b074f839b1ed7ff551","ssdeep":"192:24FyxeIDYPZu0oNB9BuD453oDfe24eSUPwbQ7hdVkllekm51vgbuBDVp:24FyxeIDf9iD453oDQUPwIhdVck51vD5","tlshash":"8b22cf212e47a2c54f1cbc3939e3b29156b67935c6a0b236b884a624c1357e27f5c7cb","first_seen":"2025-04-27T12:34:58.51573Z","last_seen":"2025-08-09T19:45:58.354251Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1016,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1016,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=1inchusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=1inchusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 10\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:46 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3579,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"b3f1bad38f06035556b98541d804599f","sha1":"a34d852efc508a15a6cb0044c537101d0bee761f","sha256":"e42252d174951e78c553188c59849ab50a4438b9bc9f45f126c627070542d82b","sha512":"117a986ae0fa257e2597a1487b902cb921421cda877f2294e39fb50bcf97effc9f626c6a0dd7faec00c0a941859f88ae04b172908dc869e807a3a20da54d8801","ssdeep":"","tlshash":"987124bc42f87892280c2901155a2beac55fb9e32b1f3cfd381b7ee0d7909365d9584e","first_seen":"2025-08-09T19:44:58.671183Z","last_seen":"2025-08-09T19:45:58.346569Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7882,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7882,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=dashusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=dashusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3138,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"0ff7ffea3a0f58a67a511b74f0585a88","sha1":"11c6ebb1b6c24f7ea66468814baab02fd69aa889","sha256":"c9d4d22c13699b24ad37e835888ceacc39951e27ea90988abd28435ca8746000","sha512":"7bfe745f2f78f81752710c568ab302a9e64bba7cca05373bd6900547667c8e60c6addc4c6f6607daa16904b449c5afe76e429f1cd149f66b9449c798dfdf6fb2","ssdeep":"","tlshash":"1c519c7c02f47ad5000d0d4596186be8c5af09e31f1fb1fd36aeb2d1ea205ba9d92c0e","first_seen":"2025-08-09T19:44:58.673441Z","last_seen":"2025-08-09T19:45:58.371269Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6008,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6008,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_pepe","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_pepe HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":276,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6fa3870e752635661720466df0ddf28b","sha1":"aeacb1dff40813d3b0b1e936938bb38df305ef3c","sha256":"4c8345fe749940fd3c68ab12f3914cd0f0037d66ae6d7c3a4617a6ff8033ae9c","sha512":"969db8e8c57abafdb4f951beba0a96e819aad539b610d575effa77197377300d778ab0d34f04cc7dd39a8d8f856d48c5c6cac6f33b748ccb444a767f699c70e3","ssdeep":"","tlshash":"a7d02be27e754d14067397c2acf52bf9f82dc009d042130259adda3932ec518b70dc32","first_seen":"2025-08-09T19:44:58.53499Z","last_seen":"2025-08-09T19:45:15.689196Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5984,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_dot","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_dot HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":246,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"676c6eab16bdd1d0872357ed5c3231bd","sha1":"43e24f3c9bb77be6e972e0a3bb268b56073297c6","sha256":"f5aab54d36c0739e094508ec92fc18a85c7075c71d2d6e31f1f4534e94708b93","sha512":"4d080d50ca1e33566cd7d5bfa3decb33f72509fa47f2d3ba84ae37a3997659d1f64db2734fbe3d16422ec397f1f4ad34416d3fd057a2253ffdc45fdc5c2d34ed","ssdeep":"","tlshash":"fed05ea83f7808162ae26fd168e43bbaa85cc082c1c24605abae8b29665d55c3955815","first_seen":"2025-08-09T19:44:58.675925Z","last_seen":"2025-08-09T19:45:15.720292Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3930,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3930,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/rightClass.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/rightClass.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jun 2023 16:34:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6493269b-1e25a\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 742 x 555, 8-bit/color RGBA, non-interlaced","md5":"84b811675d4b70da15afede8b877618e","sha1":"d708614f960a9b1b7706592847ea080948617324","sha256":"7324b3d5ee251859642ecc52b609a7b183c366c2ca78d1ff0320cc5c6c822d0b","sha512":"2554ef277a98234b18fc87ae47f56222252a2f97cdbe3ce8b8a3906b9dacfeece01e6859785f81a5ffe3bb5d472228e48bcfcbad571fbf08f758effed70e6982","ssdeep":"3072:649hTcR9t4NybrPP8SYH332b1N4CJZ9GlJc16E0Fv1jUEhRV47x:6ShTqDRbrPkXH33mZ9Glkx0Fv1jNXVQx","tlshash":"f3c3222e259ce14235a60332f233e9f41e1b696fe0944ab58f1a66194217fc20f5b78d","first_seen":"2024-08-19T23:29:57.01743Z","last_seen":"2025-08-09T19:45:58.349916Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1025,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.4.197.prod.20250731_156/entrypoint-v1.4.197.prod.20250731_156.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"38.175.44.17","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:40.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.4.197.prod.20250731_156/entrypoint-v1.4.197.prod.20250731_156.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 19:39:40 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: AliyunOSS\r\nx-oss-request-id: 688B0AC69E90E73339EF0473\r\nAccept-Ranges: bytes\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10307529325626369257\r\nx-oss-storage-class: Standard\r\nContent-MD5: 87Aes5ffomLACMwmFqTgdA==\r\nx-oss-server-time: 3\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nX-Ser: i28853_c3473, i2103121_c28197, i1940229_c22701, i1979037_c23797\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET\r\nContent-Disposition: inline\r\nAli-Tproxy-Dns-Update: sync\r\nStrict-Transport-Security: max-age=5184000;includeSubdomains\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194420,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65407), with no line terminators","md5":"f3b01eb397dfa262c008cc2616a4e074","sha1":"c440a8a74537b314b2e44ec8c0dfdea164e9bd69","sha256":"19ea2e664084de3da23b4c8099bef1ea41ba286f33b39c3b876ff0fd215f237f","sha512":"ef3b40e235fadf18108d39ecb5ddb44425a4ef973dc16b02b3d86c3c49c0f2f475547badeaa9ed3613e4551ef9264f2a74114e1f7da0063bbe9f8d79b807fdb7","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbM3Zh:+llOuU1C+Pjv+1o+9Y+","tlshash":"591408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","first_seen":"2025-08-01T09:11:03.118782Z","last_seen":"2025-09-25T08:30:32.836954Z","times_seen":383,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.4.197.prod.20250731_156/lang/en.json","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"38.175.44.17","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.4.197.prod.20250731_156/lang/en.json HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ooourteam.com/\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 19:39:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: AliyunOSS\r\nVary: Accept-Encoding\r\nx-oss-request-id: 688B0AC8C9A1D33832DC151D\r\nAccess-Control-Expose-Headers: ETag\r\nAccess-Control-Max-Age: 60\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16028488664394378425\r\nx-oss-storage-class: Standard\r\nContent-MD5: oruVbbe24X/X0b+dmxMdvA==\r\nx-oss-server-time: 7\r\nContent-Encoding: gzip\r\nX-Ser: i31845_c23673, i2260983_c27847, i1935851_c23471, i1979037_c23797\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET\r\nContent-Disposition: inline\r\nAli-Tproxy-Dns-Update: sync\r\nStrict-Transport-Security: max-age=5184000;includeSubdomains\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11955,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a2bb956db7b6e17fd7d1bf9d9b131dbc","sha1":"1e97fbb44b79f39ca8cecb1d9071295a2b389f9a","sha256":"38aff2dd9e64ef18c3f00ec50f419af9fb6fd4f5097e20ee0b7f464f4904e0a1","sha512":"ab37120117c008db033d48aab84ae632b45e9d147c660173ea80fd03514d6913a45868cac9ef70e3f4affc57bf69c13691fea424c5d72e276c35406ababa958b","ssdeep":"192:5lX/WSWyNsLZMYK92gjpSzUHmbujCJBSBnwI2f4hEnmOtEQ8PxDL:5F3tGvg2gJHmzSqI+tELB","tlshash":"6532e61dc7151db71043071bb84fa026a660915b9fa4367ef3a0416d1f6e68f62bb3ce","first_seen":"2024-11-19T23:28:12.930445Z","last_seen":"2025-11-12T03:36:09.770748Z","times_seen":762,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":93,"dns":1,"connect":28,"send":0,"wait":29,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=aaveusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=aaveusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:47 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3578,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"89c39c1e56f036f25304e6b0b8642b15","sha1":"b37961bdfb0e21a45753ec86ac9083454ed6a185","sha256":"507bc7faef15735cb01257131dbd8db06f59fe926fcff69f15b33c6cbb5a3a68","sha512":"07e352d00d11b543c1299bf7400a016a87340fe9418f82531a4a631acfcef2f7af005c9abccebd44e6ffcb71b3277851252a3db0d589b71b2d3fd08c6215b7fc","ssdeep":"","tlshash":"e77187bc03f879d5080c5a4119c92be9d46f18e31f0f31fdb96972dada1007a9d9194e","first_seen":"2025-08-09T19:44:58.684084Z","last_seen":"2025-08-09T19:45:58.328183Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9975,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9975,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_xrp","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_xrp HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":247,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d09ac4837b6105574863517f666f586f","sha1":"41ad7a5a5810ca6c5404e957fc2a49dc7112714c","sha256":"889ca7e506f2a1225c769c276ae203082d75508c36d933b0f430bbce33b948e5","sha512":"864093c3f7f899f6914b39f9a5b8dd0b8e7704010099269037145617b41b1a7a89a44061895269361d879c13ca7df079542a4958d7d86d31fb029350366290f0","ssdeep":"","tlshash":"d2d0a7903f3e48155822ebd1bceb1b5f6c4d9483c1c4430d16fe8e68157d71d7752822","first_seen":"2025-08-09T19:44:58.68605Z","last_seen":"2025-08-09T19:45:15.724569Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_crv","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_crv HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":246,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8cc6fff2d1dacc376a692ad92a3eecd3","sha1":"8ee8e1c8e85a98fcaade3561cf05d38370269250","sha256":"7ee2403a2d4cf1ae74d99b5b452c53b8ce991431d2962ee15ac04973aeb33bb2","sha512":"b44b3a2d98ba4f5b891c7cb517e67e3b4ef9bd9eeb5ac781316714f79f99653e279e450ec3a761c432606d1c854ef9eb0fc75c92682ced698a3c6d2f066140ba","ssdeep":"","tlshash":"78d0a7f47e79454940626be2bcf82baf687c8444c1816b0757bece3676fe6287505c22","first_seen":"2025-08-09T19:44:58.68765Z","last_seen":"2025-08-09T19:45:15.534253Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5974,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5974,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/UMA.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/UMA.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Nov 2022 15:52:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6363e3ad-64a\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"86655dc1b940596005b726a83c1a777a","sha1":"8abcf0da5e278a567bc8abf65e34e41df4ec8505","sha256":"0954534406237d03692e20018a64b2e116795e70d2384f0d72d2df6617950768","sha512":"b60de2aa619eefe70375f04ecd2b912fb002118ca17119434e47f1272bd79c005325b17fa53c88b14bf1b28c2bef188620762b9756216ce1d6da66ba931c0caf","ssdeep":"","tlshash":"1931e7c3a908b05f14e24e1016dbd8c7f52be8530b166c60ac07b99f6edfd84a2bcb45","first_seen":"2023-06-03T12:58:34Z","last_seen":"2026-07-28T19:23:40.82801Z","times_seen":328,"resource_available":false,"data":null}},"time_used":1048,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1048,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/img/product1.svg","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/img/product1.svg HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 716\r\nlast-modified: Fri, 29 Dec 2023 14:42:49 GMT\r\netag: \"658edae9-2cc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":716,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f94f3d0bdf8a790b24a9805e7d1f0d0","sha1":"08c8ce28d1177d4fd83312a7d18ccc1e014d955b","sha256":"c76463c767ae1ebe8de7d7d7c8e880b1ff70fd05ef6dcf737a68bc63d2697851","sha512":"62648f5557b54b9fc33ac2d09e71d642ed5ca731441820fd1b37c7d351f182922948a15e6ffeaea4ba5395f1f71dc3a541b0b069b2712e5ba944c9f92e7db2bf","ssdeep":"","tlshash":"e301c0f1721c53acb8264b7d877834b5b42774ca11e5e1cd82f1287860e016f685a9f0","first_seen":"2024-12-24T17:17:56.68092Z","last_seen":"2025-08-09T19:45:58.351419Z","times_seen":25,"resource_available":false,"data":null}},"time_used":2025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1033,"receive":992,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"1a13c-GxDOCA4lYqi36DlQRNPKg9wRKZk\"\r\naccept-ranges: bytes\r\nage: 1524907\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\nx-served-by: cache-fra-etou8220031-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 106812\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106812,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 106812, version 1.0","md5":"df7de9fe96a30f78c7f652f5b00ae016","sha1":"1b10ce080e2562a8b7e8395044d3ca83dc112999","sha256":"011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b","sha512":"d8cd580ed4119b0d31c9f3b7ea1b2002ccef31ba26cc6791114e5017e9ccffbfbf57b8611aafa52a8b3e76fc8f77b0d51d333dfcd5b293ddde61da3bbbbda47e","ssdeep":"1536:IEGBxy7wyLnYmvpdgacZtaiLBug50yslpdHfaKoGS3MUt7jCP/KgpL+HoEf7HhDt:0zy7pnYm/zcZta+UNoGS3gpL+Zwul","tlshash":"8fa302c0688d7e9ade37df31a226826373d3094a637c2d6f26997852c946e0f7637341","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-08-03T02:44:22.702047Z","times_seen":10532,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":28,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=bsvusdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=bsvusdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:47 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3436,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"d4e5894013e04f4fb044fdfda76b35c7","sha1":"bae3d42ec2553aaac573494b4889aa906ef1f8a7","sha256":"c2653bea58b5c85ca5d61abdf0d05765fa55cbb88b3338b45170eaf20e5e1b88","sha512":"269fda132f2dfe4f5939e7dccc7ad0e8de705ac06afecf30784d7afcc0a0f7815f56a0907caf3ce7f8df6d9a851946bd682d145ae2c0324bb034dfd790c76ff2","ssdeep":"","tlshash":"856178bc42f479c5141c094515892be8c46f1de72b2f35fd38aeb5d0ea508baada1c4f","first_seen":"2025-08-09T19:44:58.69475Z","last_seen":"2025-08-09T19:45:58.269294Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9958,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9958,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Public/Static/bootstrap5Slide/style.css","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /Public/Static/bootstrap5Slide/style.css HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 589\r\nlast-modified: Mon, 04 Jul 2022 17:20:12 GMT\r\netag: \"62c3214c-24d\"\r\nexpires: Sun, 10 Aug 2025 07:39:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":589,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (589), with no line terminators","md5":"df62cb99d119a66bcd5f06547d96ecb7","sha1":"a6d0e097db0919f47977c33510359bc08ec88a9c","sha256":"afca52e1c0203f27bf8165e8fcf92b2674f084f6372f12cc1e7bb3edaee35f03","sha512":"59d599c3a25a64cfae94e1b2f1328abffb199a503c0e8904a3e4a574c101cb6b72d09e94a7b2afaa3f8cbd1a55b92cb2b2bdc33b528ee6c953d30fa3b622cf0f","ssdeep":"","tlshash":"a2f07f42b71a596e5d872300a9d213abf10c7f319709097992f3211d8f29a85237df4e","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-08-03T02:44:22.698262Z","times_seen":6161,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/LTC.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/LTC.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Nov 2022 15:52:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6363e3ac-c3b\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3131,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"84781027c925a2d375db76b3d8ca9f3a","sha1":"7c5ae250e9e462c030e465d931744015af21d357","sha256":"03b779d3a4dad6d2c4fdcc972695892cf8d308facc05ed8bcd194cab0fc5210b","sha512":"b2ba2c600ee1942df7ac64e5dbf161f0e209fd2f008236963756ed797c463d1a15045d5d5f722f7929cd3c7496cea60a99191039eb141da3bdd8e2b465a23699","ssdeep":"","tlshash":"e5515cdaf30c1aa93ef410be4686030e4ea35d5a99e8d05800c70d77f494989ac7fb0d","first_seen":"2023-05-28T01:03:43Z","last_seen":"2026-07-28T19:23:40.824024Z","times_seen":344,"resource_available":false,"data":null}},"time_used":1050,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1050,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.4.197.prod.20250731_156/app-v1.4.197.prod.20250731_156.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"38.175.44.17","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:40.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.4.197.prod.20250731_156/app-v1.4.197.prod.20250731_156.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 19:39:41 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: AliyunOSS\r\nx-oss-request-id: 688B0AC79E90E73232D10773\r\nAccept-Ranges: bytes\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15429465873946991459\r\nx-oss-storage-class: Standard\r\nContent-MD5: vU0CKpu7GbwqYywUezPpHg==\r\nx-oss-server-time: 12\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nX-Ser: i28875_c3473, i2103141_c28197, i1940251_c22701, i1979063_c23797\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET\r\nContent-Disposition: inline\r\nAli-Tproxy-Dns-Update: sync\r\nStrict-Transport-Security: max-age=5184000;includeSubdomains\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1230412,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7ad877050f60aa70985cc65a32979496","sha1":"b1b9e94637e7334f33f77fe1e5a12b277795d039","sha256":"4c320e7f451a496a35606128a3d82f271b8eef85b1d68563bf24d207c027202e","sha512":"aae6771fbc89dcda460522ca6aba476e382544f4b693bb2b2945c13c1094adb49050b3a4f87aa86b6d83fae1a307c7ab43cc34583763370c620e5eb3f2753b09","ssdeep":"6144:JZzhPV/TaE996XSsEFv+vIcvB6WLzsiIJAe+bU+Yc5mppJvbUYZ6PQ0CNLePIkUp:D1kPXSDv+nvkAoiIGesNV84rmNLeCn","tlshash":"b52539cd71c2b0a207e321b5403f100bb33a6d69680d5454f665d8eabdba94ea237f7d","first_seen":"2025-08-01T09:11:03.076039Z","last_seen":"2025-09-25T08:30:32.880165Z","times_seen":381,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtanlsdsd","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtanlsdsd HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":252,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"910bdd503c0d816564225ab8b33d1ede","sha1":"9b767069af30046d6c58558ea734c91c9bc148c3","sha256":"b066bb80da0b30a0e0715fdfecaff404f9f4625f2f845cf2fb2edddf41b0344b","sha512":"f01fd05378a83fad4174b37e326dc1c28528c8f631a782228e7c1265621263755cc23db02cc32751cd61212b3341f5cec37e632b4f763108905269808b44e50d","ssdeep":"","tlshash":"7ad097f03e39482c01331be338f8233e28bc8041c0808205a3fecf2425da80cf12ac22","first_seen":"2025-08-09T19:44:58.520015Z","last_seen":"2025-08-09T19:45:15.563401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5984,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_1inch","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_1inch HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 10\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":262,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"909baf1fd3e350e0bde9a0cb946ab9d3","sha1":"f98c742f30dd08967dd058eaa9291214493f6d84","sha256":"9c2415d23859b85ec09ccaa1cf3574e40c25044b39168e798ce1407b674a16be","sha512":"8d3970ac705a437114c307204b9a3e95ba69a0cc112b977ff618a66fb6528bb8d06814b3875bd4bb429bba23f294c82ceac4804659656738e1466f6a518abb19","ssdeep":"","tlshash":"1ad05ee03d7d853959a16bd17dfb26fe54dcc48580d0730567aece692bac11d7205c13","first_seen":"2025-08-09T19:44:58.699437Z","last_seen":"2025-08-09T19:45:15.614809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_bal","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_bal HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":246,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8d1677f078cce35b9791d1a5154f8cd7","sha1":"558e4149e6ff04aec27aa93145b342841f83ea22","sha256":"30c828d40bcc5c9e913d16b70c6552bed3c390dde4f32f0d82a04c535e852717","sha512":"96eaa4999fc4581cad3733ddd04c538aa64c2b51ea29ee8165c20e3cb91c999d7449b51328164d9046d581872e0c17d39be23d048d2694f4211e0780b0470570","ssdeep":"","tlshash":"d1d05ee42e75451507b3e3c26dea267e685c8c40d0858306dabeca387aa9539711bc22","first_seen":"2025-08-09T19:44:58.701578Z","last_seen":"2025-08-09T19:45:15.649726Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5976,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5976,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_bsv","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_bsv HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":246,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"09997dad8a886ca9626a1b9294eac45a","sha1":"7566ebe37ff14d427b809ebe03a48a130b5ae5ae","sha256":"8282137d110426e8d5f4b286c30ab0f0252b783c3f0ca6069abaeb713be0cb95","sha512":"a75bbb6824e823c158e4bc3dc8a390920d593d3c9cdc1593346c9e4f28c55d2e784aae077cbd87c0369936dfe68b4b36a6967a0967efb7dd4ede83820bdbaef0","ssdeep":"","tlshash":"39d0a7f43d35c51a55739bc268fb1bbe988d8085c183870567fece6565ac20d7105d27","first_seen":"2025-08-09T19:44:58.703321Z","last_seen":"2025-08-09T19:45:15.69557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5969,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5969,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_eth","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:45.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_eth HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3a104d31598cdecc8abb8179f4501e78","sha1":"7278d147bd8d097b88597ba1d071ec1e1d670dfa","sha256":"eb8c361702415f08b82cd0b7c49728feb9bcc43943967c7bbfdde7597d5cecba","sha512":"a1790027cdc078d56c7ab06b9d4f9d096ae26e0c5e36dde37884ad34aa814388cebdfd675798251a6d2b0b26513bfed2adae79ed272c726f6e1d6bfe98b37b0e","ssdeep":"","tlshash":"60d0a7f46e794d15057167d2b8e91f7a786ec040808103c5dabdcfb23ae821cb6d6c75","first_seen":"2025-08-09T19:44:58.612697Z","last_seen":"2025-08-09T19:44:58.612697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4865,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4865,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/FIL.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/FIL.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 07 Nov 2022 05:50:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63689c8d-4879\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"41173f1fac2d8fe9fcf0285d0e7d6acd","sha1":"2262cedafbeddfe8d47ffbd2ac442b0b92e681fa","sha256":"25f2ced7253fac8937192733091dc789301446bb306bdda4e7814999d03dc692","sha512":"73354a1dab8eec7ae4d2ea5c65ae235c9b9fe2860806f1a4825284a6971a001754649f868c91bd9e29e4141e6ac8bbad092296439678b02a26e9d3463e0ea070","ssdeep":"384:ci7lfIt9MsjkET7AlZaxL9qiCH5cAWs0IMzz9zgDlV52smW7NZorx:lRfTstPSa9SDIzVgbkXWAN","tlshash":"c682e0aee2d37c184a5bcb144be634b26cd23e694b636c43703dc70c9e5481963a327b","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-07-28T19:23:40.84226Z","times_seen":354,"resource_available":false,"data":null}},"time_used":1049,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1049,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/xm/xmr.png","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:39.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"GET /xm/xmr.png HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 May 2023 07:53:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64536462-a8f\"\r\nexpires: Mon, 08 Sep 2025 19:39:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"dd806331c821d34fd7e91bfc6897211c","sha1":"24b3825bf3a8f8b5e604bf6b444d7c2d97aded69","sha256":"b24a76bd9854df525b90521299de92ac4afd44f57d801e4aae184f9bca41b3dc","sha512":"57357fbe03f5e9d7d4235beca8a5e6b052f9f941797b3d094e55646d18d26fa48973067f69164c307dd7a4fbf399ccb0bb533984f59074217da0b2da0d44475b","ssdeep":"","tlshash":"91513c320899d51cd650d53d30cb94e2ad311c7e5b88b999d6d9d1b1096a4f5543dd20","first_seen":"2024-10-23T13:33:33.483221Z","last_seen":"2026-07-28T19:23:40.853754Z","times_seen":226,"resource_available":false,"data":null}},"time_used":1036,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1036,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtrade/getlindedate?code=umausdt","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:42.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtrade/getlindedate?code=umausdt HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:43 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3283,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"53f70dcfd238de87f90637d5f073a893","sha1":"32f08c09e7eaf52162fac7d3355fa79d3473fde1","sha256":"d09e63225b0b8249bdf7deb17ef99c343342f1548edb6f124e18a155600739ea","sha512":"8f82786dea5005ff009bdb77f594f931df9a5821cafeba2e1f8fbae64feed5af06b301dec870754e64aab6d455dd76e21c3f7b842f6d7a975d80b9425b984399","ssdeep":"","tlshash":"fd6132bd43f87a89110d298524092beef89fa9e32f1f38fdb86675c1d6110729d8180e","first_seen":"2025-08-09T19:44:58.708387Z","last_seen":"2025-08-09T19:45:58.347705Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3989,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3989,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_shib","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_shib HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":254,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"95969a9af35115c6b843f2a92b2d163c","sha1":"1a8835d0f046119a466d072270d8725ceda432ff","sha256":"41c807cab019d0dbfa4e3405136675e0dc9887ee532190c8d2ae50efebc2eece","sha512":"4e268f9ae8fd2757fb4922faf1f086525a96613a49916557ab7cf92f63f77013ea531197fd73a6fb8387847fa76ca6e6e2c6268a8e6cddfd61469e48fa30e9a4","ssdeep":"","tlshash":"5bd02be0babd0915005257c12cf52f7f24ad8006914107157afece3155ec51af00ac36","first_seen":"2025-08-09T19:44:58.661675Z","last_seen":"2025-08-09T19:45:15.634933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5984,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_ht","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_ht HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 7\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"68ac40a84898f40747d958e0c0941c75","sha1":"a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d","sha256":"232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e","sha512":"0707d815ab13b1d6804fdee766d93c98b78e2ceddafbecda34f34372d1d689ada7e8777adf7264eb03a393dafa59e80ce9810cb74592580f0be1ac8ef4f453c2","ssdeep":"","tlshash":"ec70000002afa8a3028200288c0f000000ac28882ca080008c2822288a200028a00020","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-08-03T02:44:22.624109Z","times_seen":351,"resource_available":false,"data":null}},"time_used":9927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9927,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ooourteam.com/Ajaxtradenew/obtain_comp","fqdn":"ooourteam.com","domain":"ooourteam.com","tld":"com"},"ip":{"addr":"118.107.40.152","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ooourteam.com/","date":"2025-08-09T19:39:43.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ourplaux.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 May 2025 02:00:19 GMT","end":"Thu, 31 Jul 2025 02:00:18 GMT"},"fingerprint":{"sha1":"1E:58:88:83:34:BF:2B:66:9F:55:58:A8:BA:5E:CF:25:2E:61:22:CA","sha256":"50:23:C8:E4:A2:6F:FB:4B:E2:E1:F4:A4:31:36:FD:21:EE:F5:ED:B4:B9:E1:7F:BF:41:93:92:E5:B9:E4:6A:D8"}}},"request":{"raw":"POST /Ajaxtradenew/obtain_comp HTTP/1.1\r\nHost: ooourteam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://ooourteam.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ooourteam.com/\r\nCookie: PHPSESSID=thap9hc737hm4o8na4du2vbdj6; MEIQIA_TRACK_ID=31419udXiDjnuxpQ2KQ6HZu1OfI; MEIQIA_VISIT_ID=31419wXXbUZ2Ktklo3vxNmH5ySa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 Aug 2025 19:39:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":237,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"08dd9e5057dd475347673a9f4f6c9fd1","sha1":"19bfdedacaaf7a7e3c22805f7531760cf01688cf","sha256":"4a2b9ea7ba72d25925c8683367c645adddccfa37b6f6af677e57bc7b3025b377","sha512":"4b828d47f63da7183ec558b845bfd5acf6f8d5c119662adc0686253b425c5568fb0d74fa1d4829a36c6399bb8fcce6f58bee831a6438d255227919b276c14638","ssdeep":"","tlshash":"8ed0a7f87e7449f205a2abc278fc277a189d81c2804007459bffea25656994a740ac17","first_seen":"2025-08-09T19:44:58.710299Z","last_seen":"2025-08-09T19:45:15.587522Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5976,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5976,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ooourteam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}